fix(rbac): Restore listeners/finalizers update permission (#384)

* fix(rbac): Restore listeners/finalizers update permission

Without the `listeners/finalizers` `update`  rule, the listener operator is unable to set `metadata.ownerReferences[].blockOwnerDeletion` on the Service (or other) resource.

* Update description

Co-authored-by: Nick <10092581+NickLarsenNZ@users.noreply.github.com>

Author: NickLarsenNZ

deploy/helm/listener-operator/templates/roles.yaml

@@ -175,6 +175,15 @@ rules:
       - listeners/status
     verbs:
       - patch
+  # Required by Kubernetes to allow setting blockOwnerDeletion on resources (e.g. Services)
+  # owned by a Listener. This is needed when the OwnerReferencesPermissionEnforcement admission
+  # controller is enabled (which is by default in OpenShift)
+  - apiGroups:
+      - listeners.stackable.tech
+    resources:
+      - listeners/finalizers
+    verbs:
+      - update
   # PodListeners record the resolved listener addresses for each volume mounted in a Pod.
   # Created by the CSI node driver when a Pod first mounts a Listener volume, then patched
   # to add entries for additional volumes.