Create a ServiceMeshMember, rather than mutating the ServiceMeshMembe…

[alexsnaps]

…rRoll

[didierofrivia]

will see if I can use the old OpenShift instance (if I remember my credentials)

[guicassolato]

This requires new permissions to the Kuadrant controller. Please see

kuadrant-operator/controllers/kuadrant_controller.go

Line 76 in d327b4e

//+kubebuilder:rbac:groups=maistra.io,resources=servicemeshmemberrolls,verbs=get;list;watch;create;update;delete;patch

and the details of how this change affects the flow described at https://access.redhat.com/documentation/en-us/openshift_container_platform/4.2/html-single/service_mesh/index#ossm-member-roll-create-member_installing-ossm – specifically:

While project administrators are automatically given permission to create the ServiceMeshMember resource in their project, they cannot point it to any ServiceMeshControlPlane until the service mesh administrator explicitly grants access to the service mesh.

[eguzki]

👏

[guicassolato]

Beautiful!