From b6906723ccbbf09550dcc5864d58f02a14a20012 Mon Sep 17 00:00:00 2001
From: Steve Baker <sbaker@redhat.com>
Date: Wed, 1 Apr 2026 11:04:38 +1300
Subject: [PATCH] Add rbac for ironic-operator creating namespaces

The graphical consoles feature will create the namespace
openstack-ironic-consoles which Ironic will use to create the graphical
console pods.

To do this, ironic-operator needs rbac rules to create and manage (not
delete) namespaces. This is proposed as a standalone change because it
needs to be packaged in the openstack-operator bundle before
ironic-operator can use it.

Jira: OSPRH-20211
---
 config/rbac/role.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index dd75fd45..d2c710bc 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -205,3 +205,14 @@ rules:
   - list
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - update
+  - watch