From 28af4cb8117e7bcafa3aa9f30749ec5b4f01f8be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Patryk=20Ma=C5=82ek?= <patryk.malek@konghq.com>
Date: Tue, 26 Nov 2024 13:27:48 +0100
Subject: [PATCH] chore(kgo): update RBAC resources (#1153)

---
 charts/gateway-operator/CHANGELOG.md          |  7 ++++
 charts/gateway-operator/Chart.yaml            |  2 +-
 .../templates/rbac-resources.yaml             | 33 ++++++++++---------
 3 files changed, 25 insertions(+), 17 deletions(-)

diff --git a/charts/gateway-operator/CHANGELOG.md b/charts/gateway-operator/CHANGELOG.md
index 942d492b1..ba6ec9273 100644
--- a/charts/gateway-operator/CHANGELOG.md
+++ b/charts/gateway-operator/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.4.1
+
+### Changes
+
+- Update operator's RBAC policy rules.
+  [#1153](https://github.com/Kong/charts/pull/1153)
+
 ## 0.4.0
 
 ### Changes
diff --git a/charts/gateway-operator/Chart.yaml b/charts/gateway-operator/Chart.yaml
index 48a30d6ea..b6f651b0f 100644
--- a/charts/gateway-operator/Chart.yaml
+++ b/charts/gateway-operator/Chart.yaml
@@ -8,7 +8,7 @@ maintainers:
 name: gateway-operator
 sources:
   - https://github.com/Kong/charts/tree/main/charts/gateway-operator
-version: 0.4.0
+version: 0.4.1
 appVersion: "1.4"
 annotations:
   artifacthub.io/prerelease: "false"
diff --git a/charts/gateway-operator/templates/rbac-resources.yaml b/charts/gateway-operator/templates/rbac-resources.yaml
index a89bb4742..17325c8ce 100644
--- a/charts/gateway-operator/templates/rbac-resources.yaml
+++ b/charts/gateway-operator/templates/rbac-resources.yaml
@@ -179,22 +179,38 @@ rules:
       - configuration.konghq.com
     resources:
       - kongcacertificates/finalizers
+      - kongcacertificates/status
       - kongcertificates/finalizers
+      - kongcertificates/status
       - kongconsumergroups/finalizers
       - kongconsumers/finalizers
       - kongcredentialacls/finalizers
+      - kongcredentialacls/status
       - kongcredentialapikeys/finalizers
+      - kongcredentialapikeys/status
       - kongcredentialbasicauths/finalizers
+      - kongcredentialbasicauths/status
       - kongcredentialhmacs/finalizers
+      - kongcredentialhmacs/status
       - kongcredentialjwts/finalizers
+      - kongcredentialjwts/status
       - kongdataplaneclientcertificates/finalizers
+      - kongdataplaneclientcertificates/status
       - kongkeys/finalizers
+      - kongkeys/status
       - kongkeysets/finalizers
+      - kongkeysets/status
+      - kongpluginbindings/status
       - kongroutes/finalizers
+      - kongroutes/status
       - kongservices/finalizers
+      - kongservices/status
       - kongsnis/finalizers
+      - kongsnis/status
       - kongtargets/finalizers
+      - kongtargets/status
       - kongupstreams/finalizers
+      - kongupstreams/status
       - kongvaults/finalizers
     verbs:
       - patch
@@ -202,29 +218,14 @@ rules:
   - apiGroups:
       - configuration.konghq.com
     resources:
-      - kongcacertificates/status
-      - kongcertificates/status
       - kongclusterplugins/status
       - kongconsumergroups/status
       - kongconsumers/status
-      - kongcredentialacls/status
-      - kongcredentialapikeys/status
-      - kongcredentialbasicauths/status
-      - kongcredentialhmacs/status
-      - kongcredentialjwts/status
       - kongcustomentities/status
-      - kongdataplaneclientcertificates/status
       - kongingresses/status
-      - kongkeys/status
-      - kongkeysets/status
       - konglicenses/status
       - kongplugins/status
-      - kongroutes/status
-      - kongservices/status
-      - kongsnis/status
-      - kongtargets/status
       - kongupstreampolicies/status
-      - kongupstreams/status
       - kongvaults/status
       - tcpingresses/status
       - udpingresses/status
@@ -416,6 +417,7 @@ rules:
     resources:
       - konnectapiauthconfigurations/finalizers
       - konnectgatewaycontrolplanes/finalizers
+      - konnectgatewaycontrolplanes/status
     verbs:
       - patch
       - update
@@ -423,7 +425,6 @@ rules:
       - konnect.konghq.com
     resources:
       - konnectapiauthconfigurations/status
-      - konnectgatewaycontrolplanes/status
     verbs:
       - get
       - patch