Merge pull request openshift#3172 from isco-rodriguez/updateCNORbacCa…

…lico

OCPBUGS-23083: adding permission to CNO RBAC Calico path for network-node-identity deploy

control-plane-operator/controllers/hostedcontrolplane/cno/clusternetworkoperator.go

@@ -152,6 +152,20 @@ func ReconcileRole(role *rbacv1.Role, ownerRef config.OwnerRef, networkType hype
 					"watch",
 				},
 			},
+			{
+				APIGroups: []string{corev1.SchemeGroupVersion.Group},
+				Resources: []string{
+					"configmaps",
+				},
+				ResourceNames: []string{
+					"ovnkube-identity-cm",
+				},
+				Verbs: []string{
+					"create",
+					"patch",
+					"update",
+				},
+			},
 			{
 				APIGroups: []string{appsv1.SchemeGroupVersion.Group},
 				Resources: []string{"statefulsets", "deployments"},
@@ -162,6 +176,7 @@ func ReconcileRole(role *rbacv1.Role, ownerRef config.OwnerRef, networkType hype
 				Resources: []string{"deployments"},
 				ResourceNames: []string{
 					"multus-admission-controller",
+					"network-node-identity",
 				},
 				Verbs: []string{"*"},
 			},
@@ -170,6 +185,7 @@ func ReconcileRole(role *rbacv1.Role, ownerRef config.OwnerRef, networkType hype
 				Resources: []string{"services"},
 				ResourceNames: []string{
 					"multus-admission-controller",
+					"network-node-identity",
 				},
 				Verbs: []string{"*"},
 			},