Installer Controller Continuously Reconcile due to RBAC error

[matteogastaldello]

Describe the bug
Installer controller continuously due to missing RBAC policies

2024-07-02T08:12:49Z	DEBUG	installer-provider	Worflow failure	{"controller": "managed/krateoplatformops", "error": "installer-starter-pack: cannot patch \"typicode-endpoint\" with kind Secret: secrets \"typicode-endpoint\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"secrets\" in API group \"\" in the namespace \"demo-system\" && cannot patch \"fireworksapp-tgz\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"fireworksapp-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"postgresql-tgz\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"postgresql-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"static\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"static\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"external-api\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"external-api\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"internal-api\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"internal-api\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"static-external-internal-api\" with kind Column: columns.widgets.krateo.io \"static-external-internal-api\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"columns\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"two-cardtemplates\" with kind Column: columns.widgets.krateo.io \"two-cardtemplates\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"columns\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"postgresql-tgz\" with kind CompositionDefinition: compositiondefinitions.core.krateo.io \"postgresql-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"compositiondefinitions\" in API group \"core.krateo.io\" in the namespace \"demo-system\" && cannot patch \"fireworksapp-tgz\" with kind CompositionDefinition: compositiondefinitions.core.krateo.io \"fireworksapp-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"compositiondefinitions\" in API group \"core.krateo.io\" in the namespace \"demo-system\" && cannot patch \"fireworksapp-tgz\" with kind FormTemplate: formtemplates.widgets.krateo.io \"fireworksapp-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"formtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"postgresql-tgz\" with kind FormTemplate: formtemplates.widgets.krateo.io \"postgresql-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"formtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"two\" with kind Row: rows.widgets.krateo.io \"two\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"rows\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"cyberjoker\" with kind User: users.basic.authn.krateo.io \"cyberjoker\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"users\" in API group \"basic.authn.krateo.io\" at the cluster scope"}
2024-07-02T08:12:49Z	DEBUG	installer-provider	Cannot create external resource	{"controller": "managed/krateoplatformops", "request": {"name":"krateo","namespace":"krateo-system"}, "uid": "a09bbd2c-8e43-4adf-941d-d25bf52b78b9", "version": "2539", "external-name": "", "error": "installer-starter-pack: cannot patch \"typicode-endpoint\" with kind Secret: secrets \"typicode-endpoint\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"secrets\" in API group \"\" in the namespace \"demo-system\" && cannot patch \"fireworksapp-tgz\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"fireworksapp-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"postgresql-tgz\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"postgresql-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"static\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"static\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"external-api\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"external-api\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"internal-api\" with kind CardTemplate: cardtemplates.widgets.krateo.io \"internal-api\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"cardtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"static-external-internal-api\" with kind Column: columns.widgets.krateo.io \"static-external-internal-api\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"columns\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"two-cardtemplates\" with kind Column: columns.widgets.krateo.io \"two-cardtemplates\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"columns\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"postgresql-tgz\" with kind CompositionDefinition: compositiondefinitions.core.krateo.io \"postgresql-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"compositiondefinitions\" in API group \"core.krateo.io\" in the namespace \"demo-system\" && cannot patch \"fireworksapp-tgz\" with kind CompositionDefinition: compositiondefinitions.core.krateo.io \"fireworksapp-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"compositiondefinitions\" in API group \"core.krateo.io\" in the namespace \"demo-system\" && cannot patch \"fireworksapp-tgz\" with kind FormTemplate: formtemplates.widgets.krateo.io \"fireworksapp-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"formtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"postgresql-tgz\" with kind FormTemplate: formtemplates.widgets.krateo.io \"postgresql-tgz\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"formtemplates\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"two\" with kind Row: rows.widgets.krateo.io \"two\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"rows\" in API group \"widgets.krateo.io\" in the namespace \"demo-system\" && cannot patch \"cyberjoker\" with kind User: users.basic.authn.krateo.io \"cyberjoker\" is forbidden: User \"system:serviceaccount:krateo-system:installer\" cannot patch resource \"users\" in API group \"basic.authn.krateo.io\" at the cluster scope"}

To Reproduce
Install the chart at version 0.3.1