fix: allow operator SA to create/update events (#623)

Closes COO-526

Signed-off-by: Simon Pasquier <[email protected]>

bundle/manifests/observability-operator.clusterserviceversion.yaml

@@ -42,7 +42,7 @@ metadata:
     categories: Monitoring
     certified: "false"
     containerImage: observability-operator:0.4.2
-    createdAt: "2024-11-05T06:54:25Z"
+    createdAt: "2024-11-08T16:10:36Z"
     description: A Go based Kubernetes operator to setup and manage highly available
       Monitoring Stack using Prometheus, Alertmanager and Thanos Querier.
     operators.operatorframework.io/builder: operator-sdk-v1.37.0
@@ -296,7 +296,6 @@ spec:
           - ""
           resources:
           - endpoints
-          - events
           - namespaces
           - nodes
           - persistentvolumeclaims
@@ -307,6 +306,17 @@ spec:
           - get
           - list
           - watch
+        - apiGroups:
+          - ""
+          resources:
+          - events
+          verbs:
+          - create
+          - get
+          - list
+          - patch
+          - update
+          - watch
         - apiGroups:
           - apps
           resources:

deploy/operator/observability-operator-cluster-role.yaml

@@ -23,7 +23,6 @@ rules:
   - ""
   resources:
   - endpoints
-  - events
   - namespaces
   - nodes
   - persistentvolumeclaims
@@ -34,6 +33,17 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - apps
   resources:

pkg/controllers/doc.go

@@ -0,0 +1,4 @@
+package controllers
+
+// RBAC for sending Kubernetes events
+//+kubebuilder:rbac:groups="",resources=events,verbs=create;update;patch