Source release.yaml from GitHub release

bundle/manifests/shipwright-operator.clusterserviceversion.yaml

@@ -245,6 +245,25 @@ spec:
           - events
           verbs:
           - create
+        - apiGroups:
+          - ""
+          resources:
+          - pods
+          - events
+          - configmaps
+          - secrets
+          - limitranges
+          - namespaces
+          - services
+          verbs:
+          - '*'
+        - apiGroups:
+          - admissionregistration.k8s.io
+          - admissionregistration.k8s.io/v1beta1
+          resources:
+          - validatingwebhookconfigurations
+          verbs:
+          - '*'
         - apiGroups:
           - admissionregistration.k8s.io
           resources:

config/rbac/kustomization.yaml

@@ -18,3 +18,5 @@ resources:
 - shipwright_build_controller_role_binding.yaml
 - shipwright_build_aggregate_role.yaml
 - shipwright_build_aggregate_role_binding.yaml
+- shipwright_build_webhook_role.yaml
+- shipwright_build_webhook_role_binding.yaml

config/rbac/shipwright_build_webhook_role.yaml

@@ -0,0 +1,24 @@
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: build-webhook
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - events
+      - configmaps
+      - secrets
+      - limitranges
+      - namespaces
+      - services
+    verbs:
+      - '*'
+  - apiGroups:
+      - admissionregistration.k8s.io
+      - admissionregistration.k8s.io/v1beta1
+    resources:
+      - validatingwebhookconfigurations
+    verbs:
+      - '*'

config/rbac/shipwright_build_webhook_role_binding.yaml

@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: build-webhook
+roleRef:
+  kind: ClusterRole
+  name: build-webhook
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: ServiceAccount
+  name: operator
+  namespace: system