@JoshVanL @yaron2 please review and let me know if I can release a new version of the dapr-shared init container and helm chart

@salaboy we need to update the RBAC permissions as well- we currently can get secrets in all namespaces, as well as read/write ConfigMaps in all namespaces.

@JoshVanL that is a good point.. I will check that too

@JoshVanL is there any recommended scope that we should use? Should I copy the RBAC from another component?

@salaboy dapr shared shouldn't need any ClusterRoles at all.

@JoshVanL it is still creating the trustAnchors, so I cannot remove that: https://github.com/dapr/dapr-shared/pull/55/files#diff-5d8856ed15898b2dea56cb4fa7df355bef86cefe2e25eef4853b2d23a3b0fedfR77

TODO:

• Create a Job on the dapr-system namespace to do the init container bit for the trust anchors
• Create a new Service Account that lives in the dapr-system namespace to enable the copy