Crunchy Postgres missing RBAC rule leading to status: "Failed Up to date"

[muellerfabi]

We have deployed Crunchy Postgres Operator 5.4.1 with scoped permissions according to https://docs.openshift.com/container-platform/4.12/operators/admin/olm-creating-policy.html

The rules listed in .spec.install.spec.permissions.0.rules in CSV were used to create the role that is bound to the scoped serviceaccount.

Now after a while we noticed that the installed operator shows status "Failed Up to date".
CSVshows the following status:
install strategy failed: install strategy failed: deployments.apps "pgo" is forbidden: User "system:serviceaccount:postgres-operator:scoped" cannot update resource "deployments" in API group "apps" in the namespace "postgres-operator"

Adding update to the role fixes the issue.

Suggestion: insert update here: https://github.com/redhat-openshift-ecosystem/certified-operators/blob/main/operators/crunchy-postgres-operator/5.5.0/manifests/crunchy-postgres-operator.clusterserviceversion.yaml#L355

[muellerfabi]

CC @tony-landreth