Openshift compatibility (#446)

# Description

Add RBAC components for the operator to run on Openshift.

Subset of tests on openshift:

![image](https://user-images.githubusercontent.com/1712947/229998957-346b8cb3-3c22-4bd2-9516-58ede387dcc1.png)

CHANGELOG.md

@@ -9,24 +9,27 @@ All notable changes to this project will be documented in this file.
 - Enabled logging and log aggregation ([#418])
 - Deploy default and support custom affinities ([#436], [#451])
 - Added the ability to mount extra volumes for files that may be needed for NiFi processors to work ([#434])
+- Openshift compatibility ([#446]).
 - Extend cluster resources for status and cluster operation (paused, stopped) ([#447])
 - Cluster status conditions ([#448])
 
 ### Changed
 
 - [BREAKING]: Renamed global `config` to `clusterConfig` ([#417])
 - [BREAKING]: Moved `zookeeper_configmap_name` to `clusterConfig` ([#417])
+- `operator-rs` `0.33.0` -> `0.40.2` ([#418], [#446], [#447])
 - [BREAKING] Support specifying Service type.
   This enables us to later switch non-breaking to using `ListenerClasses` for the exposure of Services.
   This change is breaking, because - for security reasons - we default to the `cluster-internal` `ListenerClass`.
   If you need your cluster to be accessible from outside of Kubernetes you need to set `clusterConfig.listenerClass`
   to `external-unstable` ([#449]).
-- `operator-rs` `0.33.0` -> `0.39.0` ([#418], [#447])
+
 
 [#417]: https://github.com/stackabletech/nifi-operator/pull/417
 [#418]: https://github.com/stackabletech/nifi-operator/pull/418
 [#434]: https://github.com/stackabletech/nifi-operator/pull/434
 [#436]: https://github.com/stackabletech/nifi-operator/pull/436
+[#446]: https://github.com/stackabletech/nifi-operator/pull/446
 [#447]: https://github.com/stackabletech/nifi-operator/pull/447
 [#448]: https://github.com/stackabletech/nifi-operator/pull/448
 [#449]: https://github.com/stackabletech/nifi-operator/pull/449