Harden RBAC for helm chart

[hafe]

Is your feature request related to a problem? Please describe.
The helm chart configures a little bit too wide / not needed permissions. For example cluster-wide access of configmaps and secrets.

Describe the solution you'd like

• Configmaps and leases can be namespace bound
• Access to secrets should follow option watchSecretNamespace

Describe alternatives you've considered

Additional context

[github-actions[bot]]

Hi @hafe thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!

[brianehlert]

Can you please detail the changes you would like to see?
As far as projects this is already one of few with granular rbac permissions.

Is this about rbac customizations that can be done that are not reflected in the Helm chart?

If you could add detail, that would be very useful.

[hafe]

I am working on a pull request that targets the things I described. Is the description unclear?

[brianehlert]

So this is really about supporting those more granular RBAC settings that the controller watcher behavior allows.
Sorry, that was not clear to me at first.
Thanks.