Marco Nenciarini c7ddf03d04 fix: discover affected Roles by label instead of listing Clusters ... The ObjectStore controller now lists Roles by a label (barmancloud.cnpg.io/cluster) set by the Pre hook, inspects their rules to find which ObjectStores they reference, then fetches those ObjectStores and rebuilds the rules. This removes the clusters get/list/watch permission. Conflict handling uses RetryOnConflict to match the existing project pattern, and partial failures across Roles are aggregated with errors.Join instead of failing on the first one. Pre-existing Roles without the label won't be found by the ObjectStore controller until the Pre hook adds it on the next Cluster reconciliation. Same staleness window as the current main branch. Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>		2026-04-13 13:22:09 +02:00
..
ensure_test.go	fix: discover affected Roles by label instead of listing Clusters	2026-04-13 13:22:09 +02:00
ensure.go	fix: discover affected Roles by label instead of listing Clusters	2026-04-13 13:22:09 +02:00
suite_test.go	fix(rbac): reconcile Role when ObjectStore spec changes	2026-04-13 13:22:09 +02:00