Jean-Gabriel Gill-Couture
2c4fe5c8d6
All checks were successful
Run Check Script / check (pull_request) Successful in 2m24s
The Device CRD gained a status subresource (liveness reconciler), but RBAC treats `devices/status` as a resource distinct from `devices`, so the operator's patch_status 403'd. Add a ClusterRole rule granting get/update/patch on `devices/status`, mirroring `deployments/status`. A test locks both status subresources in the role.