Integrate cert-manager role/rolebinding to the existing installation files

Co-authored-by: Kate Stanley <11195226+katheris@users.noreply.github.com>

Signed-off-by: Gantigmaa Selenge <tina.selenge@gmail.com>

Author: tinaselenge

documentation/modules/security/proc-using-cert-manager.adoc

@@ -22,11 +22,6 @@ It is planned to move to GA after 1 or 2 releases.
 
 .Procedure
 
-. Apply the RBAC resources required for cert-manager integration.
-+
-[source,shell,subs="+quotes"]
-kubectl apply -f packaging/install/cert-manager/
-
 . Create a `Secret` containing the CA certificate that Strimzi should trust.
 +
 [source,shell,subs="+quotes"]

packaging/helm-charts/helm3/strimzi-kafka-operator/templates/020-ClusterRole-strimzi-cluster-operator-role.yaml

@@ -181,4 +181,20 @@ rules:
   - delete
   - patch
   - update
+- apiGroups:
+  - "cert-manager.io"
+  resources:
+  - certificates
+  verbs:
+  - get
+  - create
+  - delete
+  - patch
+  - update
+- apiGroups:
+  - "cert-manager.io"
+  resources:
+  - certificates/status
+  verbs:
+  - get
 {{- end -}}

packaging/install/cert-manager/010-ClusterRole.yaml

@@ -176,3 +176,19 @@ rules:
       - delete
       - patch
       - update
+  - apiGroups:
+      - "cert-manager.io"
+    resources:
+      - certificates
+    verbs:
+      - get
+      - create
+      - delete
+      - patch
+      - update
+  - apiGroups:
+      - "cert-manager.io"
+    resources:
+      - certificates/status
+    verbs:
+      - get

packaging/install/cert-manager/020-ClusterRoleBinding.yaml

@@ -47,12 +47,15 @@ rules:
   - "cert-manager.io"
   resources:
   - certificates
-  - certificates/status
   verbs:
   - get
-  - list
-  - watch
   - create
   - delete
   - patch
   - update
+- apiGroups:
+    - "cert-manager.io"
+  resources:
+    - certificates/status
+  verbs:
+    - get