Submit RBAC credentials during initial Event processing (#344)

* During initial Event processing submit the service account for pods and bind it to a cluster role that allows Patroni to successfully start. The cluster role is assumed to be created by the k8s cluster administrator.

manifests/operator-service-account-rbac.yaml

@@ -123,6 +123,21 @@ rules:
   verbs:
   - get
   - create
+- apiGroups:
+  - "rbac.authorization.k8s.io"
+  resources:
+  - rolebindings
+  verbs:
+  - get
+  - create
+- apiGroups:
+  - "rbac.authorization.k8s.io"
+  resources:
+  - clusterroles
+  verbs:
+  - bind
+  resourceNames: 
+  - zalando-postgres-operator
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1