From f403accc3243ce4079b554a048ae6390b44cbd94 Mon Sep 17 00:00:00 2001
From: Lionel Villard <villard@us.ibm.com>
Date: Tue, 28 Apr 2020 08:59:16 -0400
Subject: [PATCH] allow the eventing controller to set Deployment owner ref

---
 config/core/roles/controller-clusterroles.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/config/core/roles/controller-clusterroles.yaml b/config/core/roles/controller-clusterroles.yaml
index a8453b364e2..f4a027966de 100644
--- a/config/core/roles/controller-clusterroles.yaml
+++ b/config/core/roles/controller-clusterroles.yaml
@@ -45,6 +45,14 @@ rules:
       - "deployments"
     verbs: *everything
 
+  # PingSource controller manipulates Deployment owner reference
+  - apiGroups:
+      - "apps"
+    resources:
+      - "deployments/finalizers"
+    verbs:
+      - "update"
+
   # The namespace annotation controller needs to manipulate RoleBindings.
   - apiGroups:
       - "rbac.authorization.k8s.io"