fix(argo-rollouts): Add missing patch permissions for contour RBAC

[frankh]

Since this PR argoproj-labs/rollouts-plugin-trafficrouter-contour#53 the contour trafficrouter plugin uses patch not update.

Add the patch permission so that the latest version of the trafficrouter plugin works

Checklist:

• I have bumped the chart version according to versioning
• I have updated the documentation according to documentation
• I have updated the chart changelog with all the changes that come with this pull request according to changelog.
• Any new values are backwards compatible and/or have sensible default.
• I have signed off all my commits as required by DCO.
• My build is green (troubleshooting builds).

[jmeridth]

We match the releases. The latest release does not include that PR. https://github.com/argoproj/argo-rollouts/releases/tag/v1.6.4

[frankh]

We match the releases. The latest release does not include that PR. https://github.com/argoproj/argo-rollouts/releases/tag/v1.6.4

It's from the plugin, not argo, and it is in the latest release: https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-contour/tree/v0.3.0

[yu-croco]

It's from the plugin, not argo, and it is in the latest release: https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-contour/tree/v0.3.0

Since this block is for contour not for trafficrouter-contour, I wonder we can provide other block for trafficRouterPlugins, like below? 🤔

{{- if .Values.controller.trafficRouterPlugins }}
- apiGroups:
    - projectcontour.io
  resources:
    - httpproxies
  verbs:
    - patch
{{- end }}

[yu-croco]

Oh my bad, countor means rollouts-plugin-trafficrouter-contour. 💡 Please disregard above.

https://github.com/argoproj/argo-helm/blob/main/charts/argo-rollouts/values.yaml#L272-L273

[yu-croco]

Ah as @jmeridth mentioned, upstream has no permission for contour though there are permissions for other providers.
Ref: https://github.com/argoproj/argo-rollouts/blob/v1.6.4/manifests/role/argo-rollouts-clusterrole.yaml

@frankh
Since argo-helm follows upstream's manifest, can you please make PR at upstream?