added dynamic TLS settings

Author: vickeybrown

bundle/manifests/security-profiles-operator.clusterserviceversion.yaml

@@ -406,6 +406,7 @@ spec:
         - apiGroups:
           - config.openshift.io
           resources:
+          - apiservers
           - clusteroperators
           verbs:
           - get
@@ -554,6 +555,14 @@ spec:
           - get
           - list
           - watch
+        - apiGroups:
+          - config.openshift.io
+          resources:
+          - apiservers
+          verbs:
+          - get
+          - list
+          - watch
         serviceAccountName: spo-webhook
       - rules:
         - apiGroups:
@@ -664,6 +673,14 @@ spec:
           - get
           - list
           - watch
+        - apiGroups:
+          - config.openshift.io
+          resources:
+          - apiservers
+          verbs:
+          - get
+          - list
+          - watch
         serviceAccountName: spod
       deployments:
       - label:

bundle/manifests/spo-webhook_rbac.authorization.k8s.io_v1_clusterrole.yaml

@@ -92,3 +92,12 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - config.openshift.io
+  resources:
+  - apiservers
+  - clusteroperators
+  verbs:
+  - get
+  - list
+  - watch

bundle/manifests/spod_rbac.authorization.k8s.io_v1_clusterrole.yaml

@@ -47,6 +47,15 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - config.openshift.io
+  resources:
+  - apiservers
+  - clusteroperators
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - security-profiles-operator.x-k8s.io
   resources: