Handling Identical Kubebuilder Annotations in Different CRs with * Verbs

Signed-off-by: Oded Viner <oviner@redhat.com>

pkg/rbac/parser.go

@@ -322,6 +322,11 @@ func GenerateRoles(ctx *genall.GenerationContext, roleName string) ([]interface{
 	var objs []interface{}
 	for _, ns := range namespaces {
 		rules := rulesByNSResource[ns]
+		for _, rule := range rules {
+			if containsAsterisk(rule.Verbs) {
+				rule.Verbs = []string{"*"}
+			}
+		}
 		policyRules := NormalizeRules(rules)
 		if len(policyRules) == 0 {
 			continue
@@ -355,6 +360,15 @@ func GenerateRoles(ctx *genall.GenerationContext, roleName string) ([]interface{
 	return objs, nil
 }
 
+func containsAsterisk(strList []string) bool {
+	for _, str := range strList {
+		if str == "*" {
+			return true
+		}
+	}
+	return false
+}
+
 func (g Generator) Generate(ctx *genall.GenerationContext) error {
 	objs, err := GenerateRoles(ctx, g.RoleName)
 	if err != nil {