[Bug]: Controller is missing permissions when deployed with statfulsetRunner.include: false

[pbusko]

What happened?

When Korifi is deployed with statfulsetRunner.include: false Helm value, the controller fails during org creation:

{
  "severity": "ERROR",
  "timestamp": "2024-09-27T11:28:45.693575631Z",
  "caller": "controller/controller.go:324",
  "message": "Reconciler error",
  "controller": "cforg",
  "controllerGroup": "korifi.cloudfoundry.org",
  "controllerKind": "CFOrg",
  "CFOrg":
    {
      "name": "cf-org-7f20fd9e-4ada-4ce9-a9e3-0dd5c47ce8cd",
      "namespace": "cf"
    },
  "namespace": "cf",
  "name": "cf-org-7f20fd9e-4ada-4ce9-a9e3-0dd5c47ce8cd",
  "reconcileID": "0d06b5bd-7bf4-4832-99f1-7a2702b5e1ed",
  "error": "error propagating role-bindings: rolebindings.rbac.authorization.k8s.io \"default-admin-binding\" is forbidden: user \"system:serviceaccount:korifi:korifi-controllers-controller-manager\" (groups=[\"system:serviceaccounts\" \"system:serviceaccounts:korifi\" \"system:authenticated\"]) is attempting to grant RBAC permissions not currently held:\n{APIGroups:[\"korifi.cloudfoundry.org\"], Resources:[\"runnerinfos\"], Verbs:[\"get\" \"list\" \"watch\"]}",
  "stacktrace": "sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:324\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:261\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:222"
}

What you expected to happen

Org should be created successfully.

Acceptance Criteria

There should be no exceptions when replaceable controllers are disabled (statefulset-runner, kpack-image-builder and job-task-runner)

How to reproduce it (as minimally and precisely as possible)

Deploy Korifi with statfulsetRunner.include: false Helm value

Anything else we need to know?

Issue might not be only limited to org creation, all missing permissions from https://github.com/cloudfoundry/korifi/blob/a3d4864431d07b05d38c31037d30e6a1735a4478/helm/korifi/statefulset-runner/role.yaml should be considered

Environment

Revision of codebase: 3c82b9f
Deployed on kind