rgw: fix blockOwnerDeletion error

This restores the missing permissions to allow the object controller to
update the finalizers section in the spec. See https://sdk.operatorframework.io/docs/faqs/#after-deploying-my-operator-why-do-i-see-errors-like-is-forbidden-cannot-set-blockownerdeletion-if-an-ownerreference-refers-to-a-resource-you-cant-set-finalizers-on- for further reference

Signed-off-by: Daniel Ruiz Capilla <crd1985@gmail.com>

deploy/charts/rook-ceph/templates/clusterrole.yaml

@@ -288,6 +288,11 @@ rules:
     verbs:
       # OBC controller updates OBC and OB statuses
       - update
+  - apiGroups: ["objectbucket.io"]
+    resources: ["objectbucketclaims/finalizers", "objectbuckets/finalizers"]
+    verbs:
+      # OBC controller updates OBC and OB finalizers
+      - update
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1

deploy/examples/common.yaml

@@ -464,6 +464,11 @@ rules:
     verbs:
       # OBC controller updates OBC and OB statuses
       - update
+  - apiGroups: ["objectbucket.io"]
+    resources: ["objectbucketclaims/finalizers", "objectbuckets/finalizers"]
+    verbs:
+      # OBC controller updates OBC and OB finalizers
+      - update
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1