Merge pull request #2701 from fluxcd/add-sa-read

Grant service account read-only access to controllers

manifests/rbac/controller.yaml

@@ -23,6 +23,8 @@ rules:
   resources:
   - namespaces
   - secrets
+  - configmaps
+  - serviceaccounts
   verbs:
   - get
   - list
@@ -34,19 +36,27 @@ rules:
   verbs:
   - create
   - patch
+# required by leader election
 - apiGroups:
-  - ""
+    - ""
   resources:
-  - configmaps
+    - configmaps
-  - configmaps/status
   verbs:
-  - get
+    - get
-  - list
+    - list
-  - watch
+    - watch
-  - create
+    - create
-  - update
+    - update
-  - patch
+    - patch
-  - delete
+    - delete
+- apiGroups:
+    - ""
+  resources:
+    - configmaps/status
+  verbs:
+    - get
+    - update
+    - patch
 - apiGroups:
   - "coordination.k8s.io"
   resources: