With https://github.com/rook/rook/pull/10108 a placeholder role and role binding were added for the rgw service account so the csv generation would generate the service account. That workaround also requires a rule to be added to the role or else the generation is invalid. Now a rule is added to avoid that issue. In the future we need to remove this role and binding when the operator sdk is updated as explained in https://github.com/rook/rook/issues/10141 Signed-off-by: Travis Nielsen <tnielsen@redhat.com>