app-controller misses permissions in namespaced Argo CD installation

[llavaud]

Checklist:

• I've searched in the docs and FAQ for my answer: https://bit.ly/argocd-faq.
• I've included steps to reproduce the bug.
• I've pasted the output of argocd version.

Describe the bug

Since the merge of this #15036, namespaced Argo CD installation misses some permissions in the application controller Role.
I think we should add the following permissions in this Role:

- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - get
  - list
  - watch

To Reproduce

Make a namespaced Argo CD installation and look at the controller logs

Expected behavior

Don't have forbidden errors in the logs

Version

argocd: v2.9.3+6eba5be
  BuildDate: 2023-12-01T23:05:50Z
  GitCommit: 6eba5be864b7e031871ed7698f5233336dfe75c7
  GitTreeState: clean
  GoVersion: go1.21.3
  Compiler: gc
  Platform: linux/amd64

Logs

W1204 21:00:55.732006   7 reflector.go:324] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: failed to list *v1.Deployment: deployments.apps is forbidden: User "system:serviceaccount:argo-cd:argocd-application-controller" cannot list resource "deployments" in API group "apps" in the namespace "argo-cd"
E1204 21:00:55.732043   7 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1.Deployment: failed to list *v1.Deployment: deployments.apps is forbidden: User "system:serviceaccount:argo-cd:argocd-application-controller" cannot list resource "deployments" in API group "apps" in the namespace "argo-cd"

[llavaud]

fixed by #16785