fix: rbac (#233)

* chore(drive-by): turn a static into const

* feat: add permission to get namespaces on the management cluster

Author: zach-robinson-dev

manifests/clusterrole.yml

@@ -46,3 +46,11 @@ rules:
       - patch
       - update
       - watch
+  - apiGroups:
+      - ""
+    resources:
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch

src/controller.rs

@@ -26,7 +26,7 @@ use crate::resource_extensions::NamespacedApi;
 use crate::resources::ResourceSyncStatus;
 use crate::{requeue_after, resources::ResourceSync, util, Error, Result, FINALIZER};
 
-static RESOURCE_SYNC_FAILING_CONDITION: &str = "ResourceSyncFailing";
+const RESOURCE_SYNC_FAILING_CONDITION: &str = "ResourceSyncFailing";
 
 pub struct Context {
     pub client: Client,