chore: Add missing rule comments

NickLarsenNZ · NickLarsenNZ · commit 7bcd54ad88de · 2026-04-09T10:36:40.000+02:00
diff --git a/deploy/helm/secret-operator/templates/roles.yaml b/deploy/helm/secret-operator/templates/roles.yaml
@@ -215,6 +215,9 @@ rules:
       - create
       - patch
 {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
+  # OpenShift SecurityContextConstraints: allows the operator's ServiceAccount to use the
+  # custom SCC defined above, which grants host-path volumes and bidirectional mount propagation
+  # required by the CSI driver.
   - apiGroups:
       - security.openshift.io
     resourceNames:
