add CephCluster RBAC to the osd service account

In order for the osd service account to reference the
cephcluster CR in the owner references, OpenShift requires
access to the CephCluster CRD. This adds the minimal changes
needed to appease OpenShift.

Signed-off-by: travisn <tnielsen@redhat.com>

cluster/examples/kubernetes/ceph/common.yaml

@@ -513,6 +513,9 @@ rules:
 - apiGroups: [""]
   resources: ["configmaps"]
   verbs: [ "get", "list", "watch", "create", "update", "delete" ]
+- apiGroups: ["ceph.rook.io"]
+  resources: ["cephclusters", "cephclusters/finalizers"]
+  verbs: ["*"]
 ---
 # Aspects of ceph-mgr that require access to the system namespace
 kind: ClusterRole