Adds a reflector for caching mirrord policies (changes mirrord operat…or setup to have the operator with watch permission for policies). (#3303)

* Adds a reflector for caching mirrord policies (changes mirrord operator setup to have the operator with watch permission for policies).

* changelog

Author: meowjesty

changelog.d/+834.changed.md

@@ -0,0 +1 @@
+Add watch permission for mirrord policies (so the operator can use a reflector and cache policies).

mirrord/operator/src/setup.rs

@@ -589,15 +589,15 @@ impl OperatorClusterRole {
                 verbs: vec!["create".to_owned()],
                 ..Default::default()
             },
-            // Allow the operator to list+get mirrord policies.
+            // Allow the operator to list+get+watch mirrord policies.
             PolicyRule {
                 // Both namespaced and cluster-wide policies live in the same API group.
                 api_groups: Some(vec![MirrordPolicy::group(&()).into_owned()]),
                 resources: Some(vec![
                     MirrordPolicy::plural(&()).into_owned(),
                     MirrordClusterPolicy::plural(&()).into_owned(),
                 ]),
-                verbs: vec!["list".to_owned(), "get".to_owned()],
+                verbs: vec!["list".to_owned(), "get".to_owned(), "watch".to_owned()],
                 ..Default::default()
             },
             // Allow for patching replicas and environment variables.