Add CAPI cluster role to helm chart

[alexander-demicev]

CAPI controller was moved into a separate pod, previously it was embedded into Rancher. CAPI controller interacts with elemental resources and this migration requires a separate set of RBAC rules for the new CAPI pod, current permissions are limited to the upstream resources and rancher specific objects, elemental CRs are not included. This PR adds a cluster role with required permissions, it will be merged later as an aggregated role with the CAPI controller one.

[codecov]

Codecov Report

Patch and project coverage have no change.

Comparison is base (08934ee) 51.50% compared to head (3899111) 51.50%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #500   +/-   ##
=======================================
  Coverage   51.50%   51.50%           
=======================================
  Files          41       41           
  Lines        5551     5551           
=======================================
  Hits         2859     2859           
  Misses       2443     2443           
  Partials      249      249           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[anmazzotti]

I'm missing a bit of context.

In my understanding, the elemental-operator is not using CAPI.
A cluster is defined through the provisioning.cattle.io/v1 API, creating a kind: Cluster resource.

If the provisioning.cattle.io/v1 contract changed (for example because automatic conversion to CAPI happens), then I'm not sure this will still work.

[kkaempf]

How to fix existing deployments ?
Is a helm upgrade sufficient ?

[fgiudici]

How to fix existing deployments ? Is a helm upgrade sufficient ?

Yep, it should as the new resource will be deployed on upgrade.

[fgiudici]

We will need this in any case to allow Rancher CAPI to support elemental.
Thanks @alexander-demicev !

[juadk]

Tested successfully with:

• K3s as downstream and upstream cluster v1.26.5+k3s1
• Rancher manager v2.7.7-rc4
• Latest dev Elemental operator
• Stable UI Extension

I added the new cluster role before provisioning my cluster: