Separate create rule/resource name scoped rules

Author: prydie

manifests/oci-cloud-controller-manager-rbac.yaml

@@ -46,27 +46,39 @@ rules:
   - update
 
 # For leader election
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
+  - create
+
 - apiGroups:
   - ""
   resources:
   - endpoints
   resourceNames:
   - "cloud-controller-manager"
   verbs:
-  - create
   - get
   - list
   - watch
   - update
 
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - create
+
 - apiGroups:
   - ""
   resources:
   - configmaps
   resourceNames:
   - "cloud-controller-manager"
   verbs:
-  - create
   - get
   - update