USHIFT-704: add aggregate-route cluster role

assets/components/openshift-router/cluster-role-aggregate-route.yaml

@@ -0,0 +1,54 @@
+# This ClusterRole will allow access to routes resources.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: aggregate-route
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+- apiGroups:
+  - ""
+  - route.openshift.io
+  resources:
+  - routes
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - ""
+  - route.openshift.io
+  resources:
+  - routes/custom-host
+  verbs:
+  - create
+- apiGroups:
+  - ""
+  - route.openshift.io
+  resources:
+  - routes/status
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  - route.openshift.io
+  resources:
+  - routes/status
+  verbs:
+  - update
+- apiGroups:
+  - ""
+  - route.openshift.io
+  resources:
+  - routes
+  verbs:
+  - get
+  - list
+  - watch

pkg/components/controllers.go

@@ -109,6 +109,7 @@ func startIngressController(ctx context.Context, cfg *config.Config, kubeconfigP
 		}
 		clusterRole = []string{
 			"components/openshift-router/cluster-role.yaml",
+			"components/openshift-router/cluster-role-aggregate-route.yaml",
 		}
 		apps = []string{
 			"components/openshift-router/deployment.yaml",

scripts/auto-rebase/assets.yaml

@@ -34,6 +34,8 @@ assets:
       - file: service-internal.yaml
       - file: serving-certificate.yaml
         git_restore: True
+      - file: cluster-role-aggregate-route.yaml
+        ignore: "it's required for adding routes permission in admin clusterrole"
 
   - dir: components/lvms/
     src: lvms/amd64/