chore(rbac): Adding minimal rbac permissions with comments description (#513)

* chore(rbac): Adding minimal rbac permissions with comments description

Signed-off-by: shubham chaudhary <shubham@chaosnative.com>

* chore(chart): Adding minimal rbac permissions in charts

Signed-off-by: shubham chaudhary <shubham@chaosnative.com>

charts/gcp/gcp-vm-instance-stop/experiment.yaml

@@ -14,29 +14,38 @@ spec:
   definition:
     scope: Cluster
     permissions:
-      - apiGroups: 
-          - "" 
-          - "batch"
-          - "litmuschaos.io"
-        resources: 
-          - "jobs" 
-          - "pods" 
-          - "pods/log" 
-          - "events" 
-          - "secrets" 
-          - "pods/exec" 
-          - "chaosengines" 
-          - "chaosexperiments" 
-          - "chaosresults"
-          - "nodes"
-        verbs: 
-          - "create" 
-          - "list" 
-          - "get" 
-          - "patch" 
-          - "update" 
-          - "delete" 
-          - "deletecollection"
+      # Create and monitor the experiment & helper pods
+      - apiGroups: [""]
+        resources: ["pods"]
+        verbs: ["create","delete","get","list","patch","update", "deletecollection"]
+      # Performs CRUD operations on the events inside chaosengine and chaosresult
+      - apiGroups: [""]
+        resources: ["events"]
+        verbs: ["create","get","list","patch","update"]
+      # Fetch configmaps & secrets details and mount it to the experiment pod (if specified)
+      - apiGroups: [""]
+        resources: ["secrets","configmaps"]
+        verbs: ["get","list",]
+      # Track and get the runner, experiment, and helper pods log 
+      - apiGroups: [""]
+        resources: ["pods/log"]
+        verbs: ["get","list","watch"]  
+      # for creating and managing to execute comands inside target container
+      - apiGroups: [""]
+        resources: ["pods/exec"]
+        verbs: ["get","list","create"]
+      # for configuring and monitor the experiment job by the chaos-runner pod
+      - apiGroups: ["batch"]
+        resources: ["jobs"]
+        verbs: ["create","list","get","delete","deletecollection"]
+      # for creation, status polling and deletion of litmus chaos resources used within a chaos workflow
+      - apiGroups: ["litmuschaos.io"]
+        resources: ["chaosengines","chaosexperiments","chaosresults"]
+        verbs: ["create","list","get","patch","update","delete"]
+      # for experiment to perform node status checks
+      - apiGroups: [""]
+        resources: ["nodes"]
+        verbs: ["get","list"]
     image: "litmuschaos/go-runner:ci"
     imagePullPolicy: Always
     args: