sets the correct role rules:
  1: |
    - apiGroups:
      - ""
      resources:
      - pods
      verbs:
      - get
      - watch
      - list
      - delete
    - apiGroups:
      - ""
      resources:
      - pods/status
      verbs:
      - get
      - watch
      - list
    - apiGroups:
      - ""
      resources:
      - secrets
      verbs:
      - watch
      - list
    - apiGroups:
      - ""
      resourceNames:
      - RELEASE-NAME-shared-state
      resources:
      - secrets
      verbs:
      - get
    - apiGroups:
      - ""
      resources:
      - events
      verbs:
      - create
      - patch
    - apiGroups:
      - apps
      resources:
      - deployments
      - statefulsets
      - deployments/status
      - statefulsets/status
      verbs:
      - get
      - watch
      - list
    - apiGroups:
      - apps
      resourceNames:
      - RELEASE-NAME
      resources:
      - deployments
      - statefulsets
      verbs:
      - update
    - apiGroups:
      - coordination.k8s.io
      resources:
      - leases
      verbs:
      - create
    - apiGroups:
      - coordination.k8s.io
      resourceNames:
      - RELEASE-NAME
      resources:
      - leases
      verbs:
      - get
      - update