Operator cluster role is missing perms to patch PVC

[tnozicka]

"error":"wait pvc deletion: clear PVC finalizers: persistentvolumeclaims \"data-basic-us-east-1-us-east-1a-2\" is forbidden: User \"system:serviceaccount:scylla-operator-system:default\" cannot patch resource \"persistentvolumeclaims\" in API group \"\" in the namespace \"e2e-test-scyllacluster-77nfz-dnf8q\""

{"L":"INFO","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller","M":"Calculating cluster status...","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"INFO","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller","M":"Rack member is being replaced","rack":"us-east-1a","member":"basic-us-east-1-us-east-1a-2","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"INFO","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller","M":"Next Action: Node replace rack","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","name":"us-east-1a","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"DEBUG","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller","M":"New action","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","name":"rack-replace-node","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"DEBUG","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller.replace","M":"Replace action executed","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"DEBUG","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller.replace","M":"Member needs to be replaced","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","member":"basic-us-east-1-us-east-1a-2","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"DEBUG","T":"2021-03-05T15:38:32.667Z","N":"cluster-controller.replace","M":"Adding member address to replace address list","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","member":"basic-us-east-1-us-east-1a-2","ip":"10.103.231.46","replace_addresses":{"basic-us-east-1-us-east-1a-2":"10.103.231.46"},"_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"INFO","T":"2021-03-05T15:38:32.672Z","N":"cluster-controller.replace","M":"Deleting member PVC","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","member":"basic-us-east-1-us-east-1a-2","pvc":"data-basic-us-east-1-us-east-1a-2","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"DEBUG","T":"2021-03-05T15:38:32.674Z","N":"cluster-controller.replace","M":"Waiting for PVC deletion","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","member":"basic-us-east-1-us-east-1a-2","pvc":"data-basic-us-east-1-us-east-1a-2","_trace_id":"2_s2pBQyS2ahEVZY93CP6w"}
{"L":"ERROR","T":"2021-03-05T15:38:32.676Z","N":"cluster-controller","M":"An error occurred during cluster reconciliation","cluster":"e2e-test-scyllacluster-77nfz-dnf8q/basic","resourceVersion":"41812","error":"wait pvc deletion: clear PVC finalizers: persistentvolumeclaims \"data-basic-us-east-1-us-east-1a-2\" is forbidden: User \"system:serviceaccount:scylla-operator-system:default\" cannot patch resource \"persistentvolumeclaims\" in API group \"\" in the namespace \"e2e-test-scyllacluster-77nfz-dnf8q\"","_trace_id":"XwSbtKp1SlSWXgsxtArshw","errorStack":"github.com/scylladb/scylla-operator/pkg/controllers/cluster/actions.(*RackReplaceNode).Execute\n\tgithub.jparrowsec.cn/scylladb/scylla-operator/pkg/controllers/cluster/actions/replace.go:74\ngithub.jparrowsec.cn/scylladb/scylla-operator/pkg/controllers/cluster.(*ClusterReconciler).sync\n\tgithub.jparrowsec.cn/scylladb/scylla-operator/pkg/controllers/cluster/sync.go:76\ngithub.jparrowsec.cn/scylladb/scylla-operator/pkg/controllers/cluster.(*ClusterReconciler).Reconcile\n\tgithub.jparrowsec.cn/scylladb/scylla-operator/pkg/controllers/cluster/cluster_controller.go:122\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\tsigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:233\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tsigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:209\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).worker\n\tsigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:188\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\tk8s.io/[email protected]/pkg/util/wait/wait.go:155\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\tk8s.io/[email protected]/pkg/util/wait/wait.go:156\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\tk8s.io/[email protected]/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.Until\n\tk8s.io/[email protected]/pkg/util/wait/wait.go:90\nruntime.goexit\n\truntime/asm_amd64.s:1374\n"}