Default rule policy now allows watching resources required by OpenShift (#352)

deploy/crds/openshift_jenkins_v1alpha2_jenkins_cr.yaml

@@ -1,16 +1,70 @@
 apiVersion: jenkins.io/v1alpha2
 kind: Jenkins
 metadata:
+  annotations:
+    jenkins.io/openshift-mode: 'true'
   name: jenkins
 spec:
   master:
     containers:
-    - name: jenkins-master
-      image: quay.io/openshift/origin-jenkins:latest
-      resources:
-        limits:
-          cpu: 1500m
-          memory: 3Gi
-        requests:
-          cpu: "1"
-          memory: 500Mi
+      - name: jenkins-master
+        command:
+          - /usr/bin/go-init
+          - '-main'
+          - /usr/libexec/s2i/run
+        env:
+          - name: OPENSHIFT_ENABLE_OAUTH
+            value: 'true'
+          - name: OPENSHIFT_ENABLE_REDIRECT_PROMPT
+            value: 'true'
+          - name: DISABLE_ADMINISTRATIVE_MONITORS
+            value: 'false'
+          - name: KUBERNETES_MASTER
+            value: 'https://kubernetes.default:443'
+          - name: KUBERNETES_TRUST_CERTIFICATES
+            value: 'true'
+          - name: JENKINS_SERVICE_NAME
+            value: jenkins-operator-http-example
+          - name: JNLP_SERVICE_NAME
+            value: jenkins-operator-slave-example
+          - name: JENKINS_UC_INSECURE
+            value: 'false'
+          - name: JENKINS_HOME
+            value: /var/lib/jenkins
+          - name: JAVA_OPTS
+            value: >-
+              -XX:+UnlockExperimentalVMOptions -XX:+UnlockExperimentalVMOptions
+              -XX:+UseCGroupMemoryLimitForHeap -XX:MaxRAMFraction=1
+              -Djenkins.install.runSetupWizard=false -Djava.awt.headless=true
+        image: 'quay.io/openshift/origin-jenkins:latest'
+        imagePullPolicy: Always
+        livenessProbe:
+          httpGet:
+            path: /login
+            port: 8080
+            scheme: HTTP
+          initialDelaySeconds: 420
+          periodSeconds: 360
+          timeoutSeconds: 240
+        readinessProbe:
+          httpGet:
+            path: /login
+            port: 8080
+            scheme: HTTP
+          initialDelaySeconds: 3
+          periodSeconds: 0
+          timeoutSeconds: 240
+        resources:
+          limits:
+            cpu: 600m
+            memory: 4Gi
+          requests:
+            cpu: 500m
+            memory: 3Gi
+  service:
+    port: 8080
+    type: ClusterIP
+  slaveService:
+    port: 50000
+    type: ClusterIP
+

deploy/role.yaml

@@ -88,3 +88,20 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - "image.openshift.io"
+    resources:
+      - imagestreams
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - "build.openshift.io"
+    resources:
+      - builds
+      - buildconfigs
+    verbs:
+      - get
+      - list
+      - watch