Merge pull request #218 from inteon/fix_ssa_migration_rbac

FIX: For CSA to SSA migration, we need UPDATE permission on the resource (not the sub-resource)

Author: jetstack-bot

deploy/charts/trust-manager/templates/clusterrole.yaml

@@ -23,8 +23,14 @@ rules:
   - "trust.cert-manager.io"
   resources:
   - "bundles/status"
+  verbs: ["patch"]
+
+- apiGroups:
+  - "trust.cert-manager.io"
+  resources:
+  - "bundles"
   # We also need update here so we can perform migrations from old CSA to SSA.
-  verbs: ["update", "patch"]
+  verbs: ["update"]
 
 - apiGroups:
   - ""