fix(calico): Add missing permissions in RBAC for calico-kube-controllers (#13375)

* fix(calico): Add namespace rbac for calico-kube-controllers

* fix(calico): Add missing RBAC resource for calico-kube-controllers

roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2

@@ -71,6 +71,7 @@ rules:
       - blockaffinities
       - ipamblocks
       - ipamhandles
+      - ipamconfigs
       - tiers
     verbs:
       - get
@@ -124,4 +125,12 @@ rules:
       - list
       - update
       - watch
+  # Namespaces are watched for LoadBalancer IP allocation with namespace selector support
+  - apiGroups: [""]
+    resources:
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
 {% endif %}