@jiuker please add verification steps

I followed the below steps

1. TAG=minio/operator:pdb make all
2. kind create cluster --config kind-config.yaml
3. kind load docker-image docker.io/minio/operator:pdb
4. k kustomize . > operator-new.yaml
5. Changed the operator image value in operator-new.yaml with docker.io/minio/operator:pdb
6. k apply -f operator-new.yaml
7. Once operator pods ready, created a tenant from operator console
8. k logs minio-operator-7db874b9b-4pw9z -n minio-operator shows error as below

I0718 11:00:37.918185       1 pdb.go:259] PodDisruptionBudget: v1
E0718 11:00:37.921171       1 main-controller.go:676] error syncing 'tenant-ns/tenant-1': poddisruptionbudgets.policy "tenant-1-pool-0" is forbidden: User "system:serviceaccount:minio-operator:minio-operator" cannot get resource "poddisruptionbudgets" in API group "policy" in the namespace "tenant-ns"

Also there are no pdb created

$ k get pdb -A
No resources found

@shtripat I have fixed the ClusterRole. Test again plz. And you should update it.

Below scenarios work fine

1. Create tenant
2. Delete tenant
3. Expand tenant

And PDBs get created for pools of the tenant.

Tried below scenario manually

1. Edited tenant and removed one pool from the list
2. deleted the stateful set for corresponding pool
3. PDB doesnt get deleted and error in operator pod error syncing 'tenant-ns/tenant-1': poddisruptionbudgets.policy is forbidden: User "system:serviceaccount:minio-operator:minio-operator" cannot deletecollection resource "poddisruptionbudgets" in API group "policy" in the namespace "tenant-ns"

@harshavardhana @pjuarezd PATL