Add service update to nginx-ingress-controller RBAC

[jsulinski]

I believe this was missed from #266. @ankon points it out here: #266 (comment).

[k8s-reviewable]

This change is 

[coveralls]

Coverage remained the same at 46.507% when pulling 4f36246 on federacy:master into 2829997 on kubernetes:master.

[nevetS]

Ahhh...

Following the provided link to this comment:
kubernetes-retired/contrib#766 (comment)

When using named ports, the ingress controller will add an annotation to the service. That's why this permission is required. Cluster wide permission is required because the services can be in any namespace.

Could you also update the Readme file to reflect this permission change. It would be helpful if a comment was added that update permissions for services are only required when using named ports so that an annotation can be added to the service. That way an end user following the example can understand why it's needed.

[jsulinski]

Absolutely! I'll make this change soon.

[jsulinski]

Look good?

[coveralls]

Coverage increased (+0.02%) to 46.522% when pulling af5a3a3 on federacy:master into 2829997 on kubernetes:master.

[weitzj]

Could you maybe use alphabetical order here? (Since this is probably the only order many people could agree upon and keeping potential diffs lean)

[jsulinski]

Certainly. Good catch, thank you.

[coveralls]

Coverage decreased (-0.09%) to 46.42% when pulling a64d828 on federacy:master into 2829997 on kubernetes:master.

[jonpulsifer]

I don't know about this. Looks like #749 removed the need for that permission.

There was discussion on this in #747 (comment) as well.

[aledbf]

Closing. This is not required now after #846