ceph: add missing rights rook-ceph-purge-osd account

The purge osd job need to read and update persistentvolumeclaims
While the job doesn't failed with osd and deployments well deleted
The associated pvc is not deleted by the job as it failed to read it

Signed-off-by: n.fraison <n.fraison@criteo.com>
(cherry picked from commit 5150018)

cluster/charts/rook-ceph-cluster/templates/role.yaml

@@ -82,7 +82,7 @@ rules:
     verbs: ["get", "list", "delete" ]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["delete"]
+    verbs: ["get", "update", "delete"]
 
 {{- if .Values.monitoring.enabled }}
 ---

cluster/charts/rook-ceph/templates/role.yaml

@@ -188,5 +188,5 @@ rules:
     verbs: ["get", "list", "delete" ]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["delete"]
+    verbs: ["get", "update", "delete"]
 {{- end }}

cluster/examples/kubernetes/ceph/common-second-cluster.yaml

@@ -145,7 +145,7 @@ rules:
     verbs: ["get", "list", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["delete"]
+    verbs: ["get", "update", "delete"]
 ---
 # Allow the osd purge job to run in this namespace
 kind: RoleBinding

cluster/examples/kubernetes/ceph/common.yaml

@@ -1232,7 +1232,7 @@ rules:
     verbs: ["get", "list", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["delete"]
+    verbs: ["get", "update", "delete"]
 ---
 # Allow the osd purge job to run in this namespace
 kind: RoleBinding