Merge #249

249: Fix RBAC rules for /v1/rotate and /v1/validate r=mkmik a=mkmik



Co-authored-by: Marko Mikulicic <[email protected]>

Author: bors[bot]

controller.jsonnet

@@ -53,6 +53,7 @@ controller {
           'sealed-secrets-controller',  // but often services are referred by name only, let's not make it unnecessarily cryptic
         ],
         verbs: [
+          'create',  // rotate and validate endpoints expect POST, see https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb
           'get',
         ],
       },