
Automatic merge from submit-queue give nodes update/delete permissions delete permission is logically paired with create permission (and is used during self-registration scenarios when a node has been restarted and an existing node object has a mismatched externalID) we already need to scope update nodes/status permission to only let a node update itself, and we would scope these at the same time. fixes https://github.com/kubernetes/kubernetes/issues/41224