Add missing /status and /finalizers permissions

Author: caseydavenport

charts/tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml

@@ -151,23 +151,30 @@ rules:
   - apiGroups:
       - operator.tigera.io
     resources:
+      # Note: any resources used by the operator within an OwnerReference for resources
+      # it creates requires permissions to <resource>/finalizers.
+      - apiservers
       - apiservers/finalizers
+      - apiservers/status
       - gatewayapis
       - gatewayapis/finalizers
+      - gatewayapis/status
+      - goldmanes
+      - goldmanes/finalizers
+      - goldmanes/status
+      - imagesets
       - installations
-      - installations/status
       - installations/finalizers
+      - installations/status
+      - managementclusterconnections
+      - managementclusterconnections/finalizers
+      - managementclusterconnections/status
       - tigerastatuses
       - tigerastatuses/status
       - tigerastatuses/finalizers
-      - apiservers
-      - apiservers/status
-      - imagesets
       - whiskers
-      - goldmanes
-      - managementclusterconnections
-      - managementclusterconnections/finalizers
-      - managementclusterconnections/status
+      - whiskers/finalizers
+      - whiskers/status
     verbs:
       - get
       - list

manifests/ocp/02-role-tigera-operator.yaml

@@ -235,23 +235,30 @@ rules:
   - apiGroups:
       - operator.tigera.io
     resources:
+      # Note: any resources used by the operator within an OwnerReference for resources
+      # it creates requires permissions to <resource>/finalizers.
+      - apiservers
       - apiservers/finalizers
+      - apiservers/status
       - gatewayapis
       - gatewayapis/finalizers
+      - gatewayapis/status
+      - goldmanes
+      - goldmanes/finalizers
+      - goldmanes/status
+      - imagesets
       - installations
-      - installations/status
       - installations/finalizers
+      - installations/status
+      - managementclusterconnections
+      - managementclusterconnections/finalizers
+      - managementclusterconnections/status
       - tigerastatuses
       - tigerastatuses/status
       - tigerastatuses/finalizers
-      - apiservers
-      - apiservers/status
-      - imagesets
       - whiskers
-      - goldmanes
-      - managementclusterconnections
-      - managementclusterconnections/finalizers
-      - managementclusterconnections/status
+      - whiskers/finalizers
+      - whiskers/status
     verbs:
       - get
       - list