Merge pull request #2701 from fluxcd/add-sa-read

Grant service account read-only access to controllers

manifests/rbac/controller.yaml

@@ -23,6 +23,8 @@ rules:
   resources:
   - namespaces
   - secrets
+  - configmaps
+  - serviceaccounts
   verbs:
   - get
   - list
@@ -34,11 +36,11 @@ rules:
   verbs:
   - create
   - patch
+# required by leader election
 - apiGroups:
     - ""
   resources:
     - configmaps
-  - configmaps/status
   verbs:
     - get
     - list
@@ -47,6 +49,14 @@ rules:
     - update
     - patch
     - delete
+- apiGroups:
+    - ""
+  resources:
+    - configmaps/status
+  verbs:
+    - get
+    - update
+    - patch
 - apiGroups:
   - "coordination.k8s.io"
   resources: