Admission Controller should not require full cluster admin

[blang9238]

The current chart for the admission controller grants full cluster admin.

While applying k8s pod security policies, it was noticed that even without allowing the anchore-webhook-admission permission to use the policy, it could do it.

It was narrowed down to

anchore-charts/stable/anchore-admission-controller/templates/clusterrolebinding.yaml

Lines 22 to 24 in 70ba473

	kind: ClusterRole
	apiGroup: rbac.authorization.k8s.io
	name: cluster-admin

which gives cluster-admin permission to the anchore-admission-controller. This seems to defeat all the purpose of doing all the fine grained roles in the anchore-admission-controller helm chart as full cluster admin is given anyway.

Can we investigate the need for cluster-admin for the controller?