For image automation to use a service account to authenticate to container registries, the controllers needs read-only access to service accounts.
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Readonly access to namespaces is needed by the
image-reflector-controller to support the cross-namespace accessFrom
functionality introduced in image-reflector-controller#162.
Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>