Enable patching of private issuer configmap

[hernan82arg]

Fixes this issue:

NAME              TYPE                DATA   AGE
private-ca-cert   kubernetes.io/tls   3      35d
Error from server (Forbidden): error when applying patch:
{"metadata":{"creationTimestamp":null}}
to:
Resource: "/v1, Resource=configmaps", GroupVersionKind: "/v1, Kind=ConfigMap"
Name: "private-ca-cert", Namespace: "system-pki-trust"
for: "STDIN": error when patching "STDIN": configmaps "private-ca-cert" is forbidden: User "system:serviceaccount:system-pki:copy-root-cert" cannot patch resource "configmaps" in API group "" in the namespace "system-pki-trust"