namespaces: allow SA to update and patch

Service Accounts need to be able to patch pods and also update configmaps and secrets.

Author: mplsgrant

resources/charts/namespaces/values.yaml

@@ -26,12 +26,15 @@ roles:
       - apiGroups: [""]
         resources: ["pods", "services"]
         verbs: ["get", "list", "watch", "create", "delete", "update"]
+      - apiGroups: [""]
+        resources: ["pods"]
+        verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
       - apiGroups: [""]
         resources: ["pods/log", "pods/exec", "pods/attach", "pods/portforward"]
         verbs: ["get", "create"]
       - apiGroups: [""]
         resources: ["configmaps", "secrets"]
-        verbs: ["get", "list", "create"]
+        verbs: ["get", "list", "create", "update"]
       - apiGroups: [""]
         resources: ["persistentvolumeclaims", "namespaces"]
         verbs: ["get", "list"]