From c8a3b3bf6fce13d82d60527a990ecaf488a2c8da Mon Sep 17 00:00:00 2001
From: Rob King <rob.king@cimulate.ai>
Date: Thu, 21 Aug 2025 09:46:48 -0400
Subject: [PATCH] add RBAC for deployment status/finalizers

---
 deploy/charts/prefect-operator/templates/rbac.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/deploy/charts/prefect-operator/templates/rbac.yaml b/deploy/charts/prefect-operator/templates/rbac.yaml
index c048a4a..76b9142 100644
--- a/deploy/charts/prefect-operator/templates/rbac.yaml
+++ b/deploy/charts/prefect-operator/templates/rbac.yaml
@@ -105,6 +105,17 @@ rules:
       - update
       - patch
       - delete
+  - apiGroups: ["prefect.io"]
+    resources: ["prefectdeployments/status"]
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups: ["prefect.io"]
+    resources: ["prefectdeployments/finalizers"]
+    verbs:
+      - update
+
 ---
 kind: ClusterRoleBinding
 apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}