chore(k8s/magiclove/rook-ceph): move ceph csi rbac to rook-ceph namespace

Turns out the service account needs to be in the rook-ceph namespace, and it
must have the "-sa" suffix.

Author: uhthomas

cue.mod/gen/github.com/rook/rook/pkg/apis/ceph.rook.io/v1/BUILD.bazel

@@ -8,6 +8,7 @@ cue_library(
         "doc_go_gen.cue",
         "keys_go_gen.cue",
         "labels_go_gen.cue",
+        "namespace_go_gen.cue",
         "object_go_gen.cue",
         "placement_go_gen.cue",
         "register_go_gen.cue",
@@ -22,6 +23,6 @@ cue_library(
         "//cue.mod/gen/k8s.io/api/core/v1:cue_v1_library",
         "//cue.mod/gen/k8s.io/apimachinery/pkg/api/resource:cue_resource_library",
         "//cue.mod/gen/k8s.io/apimachinery/pkg/apis/meta/v1:cue_v1_library",
-        "//cue.mod/gen/pkg.go.dev/time:cue_time_library",
+        "//cue.mod/gen/k8s.io/apimachinery/pkg/types:cue_types_library",
     ],
 )

k8s/magiclove/ceph_csi_operator/cluster_role_binding_list.cue

@@ -35,76 +35,4 @@ import rbacv1 "k8s.io/api/rbac/v1"
 		name:      "ceph-csi-operator-controller-manager"
 		namespace: #Namespace
 	}]
-}, {
-	metadata: name: "ceph-csi-operator-cephfs-ctrlplugin"
-	roleRef: {
-		apiGroup: "rbac.authorization.k8s.io"
-		kind:     "ClusterRole"
-		name:     "ceph-csi-operator-cephfs-ctrlplugin"
-	}
-	subjects: [{
-		kind:      "ServiceAccount"
-		name:      "ceph-csi-operator-cephfs-ctrlplugin"
-		namespace: #Namespace
-	}]
-}, {
-	metadata: name: "ceph-csi-operator-cephfs-nodeplugin"
-	roleRef: {
-		apiGroup: "rbac.authorization.k8s.io"
-		kind:     "ClusterRole"
-		name:     "ceph-csi-operator-cephfs-nodeplugin"
-	}
-	subjects: [{
-		kind:      "ServiceAccount"
-		name:      "ceph-csi-operator-cephfs-nodeplugin"
-		namespace: #Namespace
-	}]
-}, {
-	metadata: name: "ceph-csi-operator-nfs-ctrlplugin"
-	roleRef: {
-		apiGroup: "rbac.authorization.k8s.io"
-		kind:     "ClusterRole"
-		name:     "ceph-csi-operator-nfs-ctrlplugin"
-	}
-	subjects: [{
-		kind:      "ServiceAccount"
-		name:      "ceph-csi-operator-nfs-ctrlplugin"
-		namespace: #Namespace
-	}]
-}, {
-	metadata: name: "ceph-csi-operator-nfs-nodeplugin"
-	roleRef: {
-		apiGroup: "rbac.authorization.k8s.io"
-		kind:     "ClusterRole"
-		name:     "ceph-csi-operator-nfs-nodeplugin"
-	}
-	subjects: [{
-		kind:      "ServiceAccount"
-		name:      "ceph-csi-operator-nfs-nodeplugin"
-		namespace: #Namespace
-	}]
-}, {
-	metadata: name: "ceph-csi-operator-rbd-ctrlplugin"
-	roleRef: {
-		apiGroup: "rbac.authorization.k8s.io"
-		kind:     "ClusterRole"
-		name:     "ceph-csi-operator-rbd-ctrlplugin"
-	}
-	subjects: [{
-		kind:      "ServiceAccount"
-		name:      "ceph-csi-operator-rbd-ctrlplugin"
-		namespace: #Namespace
-	}]
-}, {
-	metadata: name: "ceph-csi-operator-rbd-nodeplugin"
-	roleRef: {
-		apiGroup: "rbac.authorization.k8s.io"
-		kind:     "ClusterRole"
-		name:     "ceph-csi-operator-rbd-nodeplugin"
-	}
-	subjects: [{
-		kind:      "ServiceAccount"
-		name:      "ceph-csi-operator-rbd-nodeplugin"
-		namespace: #Namespace
-	}]
 }]