cluster: allow namespace admins to access certificate resources

Change-Id: I532dadfe1799da43d12598e388141f8f9a3872de
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1250
Reviewed-by: q3k <q3k@hackerspace.pl>

cluster/kube/cluster.libsonnet

@@ -126,6 +126,11 @@ local pki = import "lib/pki.libsonnet";
                     resources: ["ingresses"],
                     verbs: ["*"],
                 },
+                {
+                    apiGroups: ["certmanager.k8s.io"],
+                    resources: ["certificates"],
+                    verbs: ["*"],
+                },
             ],
         },
         // This ClusterRoleBindings allows root access to cluster admins.