fix permissions for kube-node-decommissioner

* pod list was missing
* node update instead of patch

Author: Martin Linkhorst

cluster/manifests/kube-node-decommissioner/01-rbac.yaml

@@ -16,9 +16,12 @@ metadata:
     application: kubernetes
     component: kube-node-decommissioner
 rules:
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["list"]
 - apiGroups: [""]
   resources: ["nodes"]
-  verbs: ["list", "patch"]
+  verbs: ["list", "update"]
 ---
 # This role binding allows service-account "kube-node-decommissioner" to
 # list and patch nodes.