KEP-4817: rbac permissions to update the claim status

[aojea]

Update the KEP with the new logic to restrict changes to the claim status

Implementation in kubernetes/kubernetes#134947

Discussed during kubecon

/assign @johnbelamaric @pohly @liggitt @enj
/cc @klueska @LionelJouin

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: aojea
Once this PR has been reviewed and has the lgtm label, please ask for approval from johnbelamaric. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• keps/sig-node/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[pohly]

@aojea: do you want to discuss the proposal here in the KEP update PR or in the implementation PR?

As the implementation PR already has some comments, I prefer to continue there.

[aojea]

@aojea: do you want to discuss the proposal here in the KEP update PR or in the implementation PR?

I do not mind, one or other place, but after talking with all the different stakeholders during kubecon I had the sensation that everyone was ok with this proposal, is there any conflicting point that needs clarification or that is controversial?