Missing "patch" for apps/deployments

[vvp1983]

Describe the bug

I have error
{"error":null,"level":"error","msg":"deployments.apps \"feedback\" is forbidden: User \"system:serviceaccount:infra-argocd:argorollout-argo-rollouts\" cannot update resource \"deployments\" in API group \"apps\" in the namespace \"content\"","time":"2026-04-09T10:13:52Z"}
At _helpers https://github.com/argoproj/argo-helm/blob/main/charts/argo-rollouts/templates/_helpers.tpl missing "patch"

# deployments and podtemplates read access needed for workload reference support
- apiGroups:
  - ""
  - apps
  resources:
  - deployments
  - podtemplates
  verbs:
  - get
  - list
  - watch
  - update

Related helm chart

argo-rollouts

Helm chart version

2.37.3

To Reproduce

1. Create rollout resource

apiVersion: argoproj.io/v1alpha1
kind: Rollout
-----------------

2. sync argocd get error cannot update resource

3. After creation clusterrole and clusterrolebinding with patch error fixed

Expected behavior

After add "patch" error fixed

Screenshots

No response

Additional context

No response

[rurod]

Hi @vvp1983,

I just installed argo-rollouts using the default values.yaml. I created the demo Rollout given in the official argo rollouts doc and I can't reproduce the error you are describing.

Would you mind giving a little more details, like the values.yaml you're using and your Rollout file ?

Thanks