fix: Allow roles update for che workspace cluster role

bundle/nightly/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml

@@ -83,7 +83,7 @@ metadata:
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: https://github.com/eclipse-che/che-operator
     support: Eclipse Foundation
-  name: eclipse-che-preview-kubernetes.v7.34.0-267.nightly
+  name: eclipse-che-preview-kubernetes.v7.34.0-268.nightly
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -329,6 +329,7 @@ spec:
               verbs:
                 - get
                 - create
+                - update
                 - delete
             - apiGroups:
                 - rbac.authorization.k8s.io
@@ -1299,4 +1300,4 @@ spec:
   maturity: stable
   provider:
     name: Eclipse Foundation
-  version: 7.34.0-267.nightly
+  version: 7.34.0-268.nightly

bundle/nightly/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml

@@ -74,7 +74,7 @@ metadata:
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: https://github.com/eclipse-che/che-operator
     support: Eclipse Foundation
-  name: eclipse-che-preview-openshift.v7.34.0-267.nightly
+  name: eclipse-che-preview-openshift.v7.34.0-268.nightly
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -362,6 +362,7 @@ spec:
               verbs:
                 - get
                 - create
+                - update
                 - delete
             - apiGroups:
                 - authorization.openshift.io
@@ -379,6 +380,7 @@ spec:
               verbs:
                 - get
                 - create
+                - update
                 - delete
             - apiGroups:
                 - rbac.authorization.k8s.io
@@ -1362,4 +1364,4 @@ spec:
   maturity: stable
   provider:
     name: Eclipse Foundation
-  version: 7.34.0-267.nightly
+  version: 7.34.0-268.nightly

config/rbac/cluster_role.yaml

@@ -108,6 +108,7 @@ rules:
     verbs:
       - get
       - create
+      - update
       - delete
   - apiGroups:
       - authorization.openshift.io
@@ -125,6 +126,7 @@ rules:
     verbs:
       - get
       - create
+      - update
       - delete
   - apiGroups:
       - rbac.authorization.k8s.io

controllers/che/workspace_namespace_permission.go

@@ -311,7 +311,7 @@ func getWorkspacesPolicies() []rbac.PolicyRule {
 		{
 			APIGroups: []string{"rbac.authorization.k8s.io"},
 			Resources: []string{"roles"},
-			Verbs:     []string{"get", "create"},
+			Verbs:     []string{"get", "update", "create"},
 		},
 		{
 			APIGroups: []string{"rbac.authorization.k8s.io"},
@@ -333,7 +333,7 @@ func getWorkspacesPolicies() []rbac.PolicyRule {
 		{
 			APIGroups: []string{"authorization.openshift.io"},
 			Resources: []string{"roles"},
-			Verbs:     []string{"get", "create"},
+			Verbs:     []string{"get", "update", "create"},
 		},
 		{
 			APIGroups: []string{"authorization.openshift.io"},