Update deployment and rbac to work at a cluster level

[etsauer]

@mathianasj

[mathianasj]

I like how you split up the roles so that it restricts what it needs to run the operator in the namespace the container is running and what it needs to perform its tasks against routes and secrets

[mathianasj]

also need to include this one so it can update existing routes

- apiGroups:
  - "route.openshift.io"
  resources:
  - routes/custom-host
  verbs:
  - update

[mathianasj]

and these

  - apiGroups:
    - extensions
    resources:
    - replicasets
    - deployments
    verbs:
    - "get"
  - apiGroups:
    - monitoring.coreos.com
    resources:
    - servicemonitors
    verbs:
    - "get"
    - "create"
  - apiGroups:
    - extensions
    resources:
    - deployments/finalizers
    resourceNames:
    - cert-operator
    verbs:
    - "update"

[etsauer]

@mathianasj made the recommended changes.