ambassador: allow get,list,watch on CRDs (#14155)

Signed-off-by: Johannes Brüderl <johannes.bruederl@eon.com>

stable/ambassador/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: 0.70.1
 description: A Helm chart for Datawire Ambassador
 name: ambassador
-version: 2.6.1
+version: 2.6.2
 icon: https://www.getambassador.io/images/logo.png
 home: https://www.getambassador.io/
 sources:

stable/ambassador/templates/rbac.yaml

@@ -23,6 +23,9 @@ rules:
   - apiGroups: [ "getambassador.io" ]
     resources: [ "*" ]
     verbs: ["get", "list", "watch"]
+  - apiGroups: [ "apiextensions.k8s.io" ]
+    resources: [ "customresourcedefinitions" ]
+    verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
 {{- if .Values.rbac.namespaced }}