Automated cherry pick of #3393: Reduce permission of antrea service accounts

[tnqn]

Cherry pick of #3393 on release-1.5.

#3393: Reduce permission of antrea service accounts

For details on the cherry pick process, see the cherry pick requests page.

[codecov-commenter]

Codecov Report

Merging #3408 (461d8e8) into release-1.5 (3c17a79) will decrease coverage by 14.19%.
The diff coverage is 33.33%.

❗ Current head 461d8e8 differs from pull request most recent head 59d89e0. Consider uploading reports for the commit 59d89e0 to get more accurate results

@@               Coverage Diff                @@
##           release-1.5    #3408       +/-   ##
================================================
- Coverage        61.12%   46.93%   -14.20%     
================================================
  Files              332      436      +104     
  Lines            28513    52064    +23551     
================================================
+ Hits             17429    24437     +7008     
- Misses            9195    25356    +16161     
- Partials          1889     2271      +382     

Flag	Coverage Δ
e2e-tests	52.46% <33.33%> (?)
integration-tests	34.05% <ø> (?)
kind-e2e-tests	?
unit-tests	?

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
pkg/agent/agent.go	49.80% <0.00%> (-1.28%)	⬇️
pkg/agent/nodeportlocal/k8s/annotations.go	84.44% <0.00%> (-15.56%)	⬇️
pkg/agent/wireguard/client_linux.go	48.40% <100.00%> (-16.78%)	⬇️
pkg/controller/egress/controller.go	0.00% <0.00%> (-88.45%)	⬇️
pkg/controller/networkpolicy/endpoint_querier.go	4.58% <0.00%> (-86.85%)	⬇️
pkg/agent/util/iptables/lock.go	0.00% <0.00%> (-81.82%)	⬇️
pkg/controller/ipam/antrea_ipam_controller.go	0.00% <0.00%> (-80.29%)	⬇️
pkg/controller/ipam/validate.go	0.00% <0.00%> (-80.00%)	⬇️
pkg/agent/cniserver/ipam/antrea_ipam_controller.go	0.00% <0.00%> (-79.77%)	⬇️
...kg/agent/flowexporter/connections/conntrack_ovs.go	0.00% <0.00%> (-77.58%)	⬇️
... and 457 more

[tnqn]

/test-e2e
/test-networkpolicy
/test-conformance