Updated the documentation to also create a role and binding for updating

the status section of the policy.

Signed-off-by: Lior Okman <[email protected]>

site/content/en/docs/tasks/extensibility/extension-server.md

@@ -88,12 +88,20 @@ image name and tag.
 * Grant Envoy Gateway's `ServiceAccount` permission to access the extension server's CRD
 
   ```shell
+  kubectl create clusterrole listener-context-example-status-update \
+             --verb=update  \
+             --resource=ListenerContextExample/status
+
   kubectl create clusterrole listener-context-example-viewer \
              --verb=get,list,watch  \
              --resource=ListenerContextExample
 
   kubectl create clusterrolebinding envoy-gateway-listener-context \
-             --clusterrole=listener-context-example-viewer \
+             --clusterrole=listener-context-example-viewer  \
+             --serviceaccount=envoy-gateway-system:envoy-gateway
+
+  kubectl create clusterrolebinding envoy-gateway-listener-context-status \
+             --clusterrole=listener-context-example-status-update \
              --serviceaccount=envoy-gateway-system:envoy-gateway
   ```