fix(install): revert watch rbac

Author: squakez

pkg/resources/config/rbac/descoped/operator-cluster-role.yaml

@@ -193,6 +193,7 @@ rules:
   - get
   - list
   - patch
+  - watch
 # Service Accounts (dynamic SA creation)
 - apiGroups:
   - ""
@@ -203,6 +204,7 @@ rules:
   - delete
   - get
   - list
+  - watch
 # Required to check if a ServiceAccount can access other namespaces resources
 - apiGroups:
   - authorization.k8s.io

pkg/resources/config/rbac/namespaced/operator-role.yaml

@@ -180,6 +180,17 @@ rules:
   verbs:
   - get
   - list
+# Service Accounts (dynamic SA creation)
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - watch
 # Roles and RoleBindings
 - apiGroups:
   - rbac.authorization.k8s.io
@@ -192,3 +203,4 @@ rules:
   - get
   - list
   - patch
+  - watch