fix: Calico RBAC rules to delete Installations

hack/addons/kustomize/tigera-operator/kustomization.yaml.tmpl

@@ -22,3 +22,9 @@ helmCharts:
   repo: https://docs.tigera.io/calico/charts
 
 namespace: tigera-operator
+
+patches:
+- path: ./overlays/clusterrole.yaml
+  target:
+    kind: ClusterRole
+    name: tigera-operator

hack/addons/kustomize/tigera-operator/overlays/clusterrole.yaml

@@ -0,0 +1,17 @@
+# Copyright 2023 D2iQ, Inc. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+# Unreleased fix from https://github.com/projectcalico/calico/commit/7f5db2347fc5f65ff74c67f7b588c8d9509f3dbe
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: NA
+rules:
+  # In addition to the above, the operator should have the ability to delete their own resources during uninstallation.
+  - apiGroups:
+      - operator.tigera.io
+    resources:
+      - installations
+      - apiservers
+    verbs:
+      - delete

hack/addons/update-calico-manifests.sh

@@ -22,6 +22,7 @@ readonly FILE_NAME="tigera-operator.yaml"
 readonly KUSTOMIZE_BASE_DIR="${SCRIPT_DIR}/kustomize/tigera-operator/"
 envsubst -no-unset <"${KUSTOMIZE_BASE_DIR}/kustomization.yaml.tmpl" >"${ASSETS_DIR}/kustomization.yaml"
 cp "${KUSTOMIZE_BASE_DIR}"/*.yaml "${ASSETS_DIR}"
+cp -r "${KUSTOMIZE_BASE_DIR}"/overlays "${ASSETS_DIR}"
 
 # The operator manifest in YAML format is pretty big. It turns out that much of that is whitespace. Converting the
 # manifest to JSON without indentation allows us to remove most of the whitespace, reducing the size by more than half.