[rbac] There are roles missing in the clusterapiservertemplate file.

[alejandroEsc]

What this PR does / why we need it: Some cluster role bindings were missing as suggested in https://github.com/kubernetes-incubator/apiserver-builder/blob/master/docs/concepts/auth.md.

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Special notes for your reviewer:

Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.

Release note:

missing rbac resources added to apiserverclusterapiservertemplate file.

[davidewatson]

Should common code make assumptions about cluster-scoped resources (e.g. ClusterRoles, Namespacess, etc.)? Maybe not.

Even still, I tend to favor merging this, or some other common code which providers can share. Each provider shouldn't have to create this ClusterRoleBinding...

[roberthbailey]

@davidewatson - embedding this yaml inside the code probably isn't a great idea long term, but for now I think it makes sense to make the role bindings correct. Any objections to merging this?

[roberthbailey]

/assign @davidewatson

[k8s-ci-robot]

@roberthbailey: GitHub didn't allow me to assign the following users: davidewatson.

Note that only kubernetes-sigs members and repo collaborators can be assigned.
For more information please see the contributor guide

In response to this:

/assign @davidewatson

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[davidewatson]

@roberthbailey: lgtm, thanks!

[davidewatson]

/lgtm

[k8s-ci-robot]

@davidewatson: changing LGTM is restricted to assignees, and only kubernetes-sigs/cluster-api repo collaborators may be assigned issues.

In response to this:

/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[roberthbailey]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: alejandroEsc, roberthbailey

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [roberthbailey]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment