charts/osm-rbac: add watch verb for serviceaccounts
Although we do not explicitly use `Watch()` on `serviceaccount`,
the client-go informers use this internally for event
notifications.
@@ -13,11 +13,8 @@ rules:
resources: ["jobs"]
verbs: ["list", "get", "watch"]
- apiGroups: [""]
- resources: ["endpoints", "namespaces", "pods", "services", "secrets", "configmaps"]
+ resources: ["endpoints", "namespaces", "pods", "services", "secrets", "configmaps", "serviceaccounts"]
verbs: ["list", "get", "watch"]
- - apiGroups: [""]
- resources: ["serviceaccounts"]
- verbs: ["list", "get"]
# Port forwarding is needed for the OSM pod to be able to connect
# to participating Envoys and fetch their configuration.
