Fix networkplugin cert renewal RBAC

[friegger]

Fixes #1508

Summary by CodeRabbit

• Bug Fixes
  • Expanded network plugin permissions to support creating and retrieving certificate signing requests.
  • Enabled the client certificate renewal flow to proceed successfully, improving reliability of certificate-related operations.

[coderabbitai]

📝 Walkthrough

Walkthrough

Added RBAC rules to the networking.ironcore.dev:system:networkplugins ClusterRole for certificate signing requests, including certificatesigningrequests and the certificatesigningrequests/networkpluginclient subresource, with comments about the renewal flow.

Changes

Network Plugin RBAC Update

Layer / File(s)	Summary
Add CSR RBAC rules config/apiserver/rbac/networkplugin_role.yaml	New rules grant certificates.k8s.io permissions for certificatesigningrequests (create/get/list/watch) and certificatesigningrequests/networkpluginclient (create), with inline comments describing the SubjectAccessReview behavior for client-certificate renewal.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

• ironcore-dev/ironcore#1465: Modifies the same networking.ironcore.dev:system:networkplugins ClusterRole in config/apiserver/rbac/networkplugin_role.yaml, affecting the same RBAC rules.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	No pull request description was provided, so the required template sections are missing.	Add the Proposed Changes bullets and a Fixes # reference, using the repository's description template.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly matches the main change: updating networkplugin RBAC for certificate renewal permissions.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/networkplugin-cert-renewal-rbac

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}