Merge pull request #8929 from zalando-incubator/pod-list-permission

Fix permissions for kube-node-decommissioner

Author: zaklawrencea

cluster/manifests/kube-node-decommissioner/01-rbac.yaml

@@ -16,9 +16,12 @@ metadata:
     application: kubernetes
     component: kube-node-decommissioner
 rules:
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["list"]
 - apiGroups: [""]
   resources: ["nodes"]
-  verbs: ["list", "patch"]
+  verbs: ["list", "update"]
 ---
 # This role binding allows service-account "kube-node-decommissioner" to
 # list and patch nodes.