RBACs are too permissive/ clusterwide mode rbac.

[rverma-dev]

While trying to use the operator in clusterwide mode, we switch role to clusterrole in rbac.
Found its too permissive, can we trim the permissions & provide a clusterwide mode rbac.

[jmymy]

+1

Wondering why it needs access to this at all

- apiGroups:
  - apps
  resources:
  - replicasets
  verbs:
  - get
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - '*'