Add RBAC policy rules for csi-external-provisioner and csi-external-attacher

[davidz627]

Adds RBAC Policy rules for csi-external-provisioner and csi-external-attacher so that CSI drivers can bind to these cluster roles on every version of k8s where CSI is Beta or above.

These roles were added in 1.11 but never cherrypicked back to 1.10. The roles originally added as a part of a larger change here: #61866

I could not do a direct cherry-pick because some of the RBAC primitives changed and there was also a fix applied on top with this PR:
#65070
The fix has been included in this commit.

/kind enhancement
/sig storage
/cc @msau42
/assign @liggitt @MaciekPytel

Added default ClusterRoles for external CSI components csi-external-provisioner and csi-external-attacher

[msau42]

/lgtm

[liggitt]

/lgtm

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: davidz627, liggitt, msau42

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• plugin/pkg/auth/OWNERS [liggitt]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[MaciekPytel]

@davidz627 Can you add a release note? There is some user visible change, so it's good if it shows up in notes for 1.10.5.

[k8s-github-robot]

[MILESTONENOTIFIER] Milestone Pull Request Labels Incomplete

@MaciekPytel @davidz627 @liggitt @msau42

Action required: This pull request requires label changes.

kind: Must specify exactly one of kind/bug, kind/cleanup or kind/feature.

Help

• Additional instructions
• Commands for setting labels

[k8s-github-robot]

/test all [submit-queue is verifying that this PR is safe to merge]

[k8s-github-robot]

Automatic merge from submit-queue.