Merge pull request #17134 from jpeeler/rbac-serviceinstance

Automatic merge from submit-queue (batch tested with PRs 15163, 17134).

catalog: add RBAC rules for serviceinstances

Author: openshift-merge-robot

pkg/oc/bootstrap/docker/openshift/rbac.go

@@ -15,7 +15,7 @@ func GetServiceCatalogRBACDelta() []rbac.ClusterRole {
 				Name: bootstrappolicy.AdminRoleName,
 			},
 			Rules: []rbac.PolicyRule{
-				rbac.NewRule("create", "update", "delete", "get", "list", "watch").Groups("servicecatalog.k8s.io").Resources("serviceinstances", "servicebindings").RuleOrDie(),
+				rbac.NewRule("create", "update", "delete", "get", "list", "watch", "patch").Groups("servicecatalog.k8s.io").Resources("serviceinstances", "servicebindings").RuleOrDie(),
 				rbac.NewRule("create", "update", "delete", "get", "list", "watch").Groups("settings.k8s.io").Resources("podpresets").RuleOrDie(),
 			},
 		},
@@ -24,7 +24,7 @@ func GetServiceCatalogRBACDelta() []rbac.ClusterRole {
 				Name: bootstrappolicy.EditRoleName,
 			},
 			Rules: []rbac.PolicyRule{
-				rbac.NewRule("create", "update", "delete", "get", "list", "watch").Groups("servicecatalog.k8s.io").Resources("serviceinstances", "servicebindings").RuleOrDie(),
+				rbac.NewRule("create", "update", "delete", "get", "list", "watch", "patch").Groups("servicecatalog.k8s.io").Resources("serviceinstances", "servicebindings").RuleOrDie(),
 				rbac.NewRule("create", "update", "delete", "get", "list", "watch").Groups("settings.k8s.io").Resources("podpresets").RuleOrDie(),
 			},
 		},