Add stateful sets permissions to disruption controller

Author: liggitt

pkg/cmd/server/bootstrappolicy/infra_sa_policy.go

@@ -745,7 +745,11 @@ func init() {
 					Verbs:     sets.NewString("list", "watch"),
 					Resources: sets.NewString("replicationcontrollers"),
 				},
-				// DisruptionBudgetController.dStore.ListWatch
+				{
+					APIGroups: []string{apps.GroupName},
+					Verbs:     sets.NewString("list", "watch"),
+					Resources: sets.NewString("statefulsets"),
+				},
 				{
 					APIGroups: []string{policy.GroupName},
 					Verbs:     sets.NewString("get", "list", "watch"),

test/testdata/bootstrappolicy/bootstrap_cluster_roles.yaml

@@ -2811,6 +2811,14 @@ items:
     verbs:
     - list
     - watch
+  - apiGroups:
+    - apps
+    attributeRestrictions: null
+    resources:
+    - statefulsets
+    verbs:
+    - list
+    - watch
   - apiGroups:
     - policy
     attributeRestrictions: null