fix: Add ReplicaSet cache and RBAC access for generated config cleanup (#309)

Generated config cleanup lists ReplicaSets to preserve ConfigMaps still
referenced by in-flight rollouts. Add ReplicaSet cache coverage and RBAC
so that lookup works reliably under the controller-runtime cached
client.

---------

Signed-off-by: Vaishnavi Hire <vhire@redhat.com>

Author: VaishnaviHire

config/rbac/role.yaml

@@ -63,6 +63,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - autoscaling
   resources:

controllers/kubebuilder_rbac.go

@@ -7,6 +7,8 @@ package controllers
 
 // Deployment permissions - controller creates and manages deployments
 //+kubebuilder:rbac:groups=apps,resources=deployments,verbs=get;list;watch;create;update;patch;delete
+// ReplicaSet permissions - controller lists rollout history to retain referenced generated configmaps
+//+kubebuilder:rbac:groups=apps,resources=replicasets,verbs=get;list;watch
 
 // Service permissions - controller creates and manages services
 //+kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;patch;delete

release/operator-openshift.yaml

@@ -6922,6 +6922,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - autoscaling
   resources:

release/operator.yaml

@@ -6923,6 +6923,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - autoscaling
   resources: