adds operator permissions to ClusterRole:
  1: |
    apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRole
    metadata:
      name: RELEASE-NAME
    rules:
    - apiGroups:
      - ""
      resources:
      - users
      - groups
      - serviceaccounts
      verbs:
      - impersonate
    - apiGroups:
      - ""
      resources:
      - pods
      verbs:
      - get
    - apiGroups:
      - authorization.k8s.io
      resources:
      - selfsubjectaccessreviews
      verbs:
      - create
