update rbac for capi (#789)

Signed-off-by: Zhiwei Yin <zyin@redhat.com>

deploy/cluster-manager/chart/cluster-manager/templates/cluster_role.yaml

@@ -7,6 +7,11 @@ rules:
 - apiGroups: [""]
   resources: ["configmaps", "namespaces", "serviceaccounts", "services"]
   verbs: ["create", "get", "list", "update", "watch", "patch", "delete", "deletecollection"]
+- apiGroups: [""]
+  resources: ["serviceaccounts/token"]
+  resourceNames:
+    - "cluster-bootstrap"
+  verbs: ["get", "create"]
 - apiGroups: [""]
   resources: ["pods"]
   verbs: ["get"]

deploy/cluster-manager/config/rbac/cluster_role.yaml

@@ -9,6 +9,11 @@ rules:
 - apiGroups: [""]
   resources: ["configmaps", "namespaces", "serviceaccounts", "services"]
   verbs: ["create", "get", "list", "update", "watch", "patch", "delete", "deletecollection"]
+- apiGroups: [""]
+  resources: ["serviceaccounts/token"]
+  resourceNames:
+    - "cluster-bootstrap"
+  verbs: ["get", "create"]
 - apiGroups: [""]
   resources: ["pods"]
   verbs: ["get"]

deploy/cluster-manager/olm-catalog/latest/manifests/cluster-manager.clusterserviceversion.yaml

@@ -59,7 +59,7 @@ metadata:
     categories: Integration & Delivery,OpenShift Optional
     certified: "false"
     containerImage: quay.io/open-cluster-management/registration-operator:latest
-    createdAt: "2024-12-24T03:03:39Z"
+    createdAt: "2025-01-06T02:51:43Z"
     description: Manages the installation and upgrade of the ClusterManager.
     operators.operatorframework.io/builder: operator-sdk-v1.32.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
@@ -127,6 +127,15 @@ spec:
           - patch
           - delete
           - deletecollection
+        - apiGroups:
+          - ""
+          resourceNames:
+          - cluster-bootstrap
+          resources:
+          - serviceaccounts/token
+          verbs:
+          - get
+          - create
         - apiGroups:
           - ""
           resources: