chore: Describe RBAC rules, remove unnecessary rules#820

Draft

NickLarsenNZ wants to merge 14 commits intomainfrom

chore/rbac-review

Commits on Mar 26, 2026

chore: Describe RBAC rules, remove unnecessary rules
NickLarsenNZ
committed

Commits on Apr 9, 2026

chore: Add missing rule comments
NickLarsenNZ
committed
chore: Update changelog
NickLarsenNZ
committed
chore: Remove the get for customresourcedefinitions for the operator clusterrole
NickLarsenNZ
committed
chore: Remove nodes list/watch
NickLarsenNZ
committed
chore: Remove the configmaps/secrets/serviceaccounts rule for the product clusterrole
NickLarsenNZ
committed
fix: Always allow customresourcedefinitions list/watch
NickLarsenNZ
committed
chore: Simplify the rule comments
NickLarsenNZ
committed
chore: Remove the events.k8s.io rule from the product ClusterRole
NickLarsenNZ
committed
chore: Keep the rbac.authorization.k8s.io rules within a ClusterRole close to each other
NickLarsenNZ
committed
chore: Split the roles.yaml into separate files for clusterrole-operator.yaml and clusterrole-product.yaml
NickLarsenNZ
committed
chore: Update changelog
NickLarsenNZ
committed
Merge branch 'main' into chore/rbac-review
NickLarsenNZ
authored
chore: Restore rules after discovering that the bundle-builder clusterrole is not used
NickLarsenNZ
committed