registry can now list image streams

To sustain registry catalog API implemented in
openshift/image-registry#87

Not really necessary since registry will attempt to use user's token.
But a fall-back to registry client depends on this policy.

Signed-off-by: Michal Minář <[email protected]>

Author: Michal Minář

pkg/cmd/server/bootstrappolicy/policy.go

@@ -581,7 +581,7 @@ func GetOpenshiftBootstrapClusterRoles() []rbacv1.ClusterRole {
 				Name: RegistryRoleName,
 			},
 			Rules: []rbacv1.PolicyRule{
-				rbacv1helpers.NewRule("list").Groups(kapiGroup).Resources("limitranges", "resourcequotas").RuleOrDie(),
+				rbacv1helpers.NewRule("list").Groups(kapiGroup).Resources("limitranges", "resourcequotas", "imagestreams").RuleOrDie(),
 
 				rbacv1helpers.NewRule("get", "delete").Groups(imageGroup, legacyImageGroup).Resources("images", "imagestreamtags").RuleOrDie(),
 				rbacv1helpers.NewRule("get").Groups(imageGroup, legacyImageGroup).Resources("imagestreamimages", "imagestreams/secrets").RuleOrDie(),

test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml

@@ -1812,6 +1812,7 @@ items:
   - apiGroups:
     - ""
     resources:
+    - imagestreams
     - limitranges
     - resourcequotas
     verbs:

test/testdata/bootstrappolicy/bootstrap_policy_file.yaml

@@ -1812,6 +1812,7 @@ items:
   - apiGroups:
     - ""
     resources:
+    - imagestreams
     - limitranges
     - resourcequotas
     verbs: