Fixes issue #7573 - Made Calico permissions compatible with v3.18.x (see...

Fixes issue #7573 - Made Calico permissions compatible with v3.18.x (see https://github.com/projectcalico/calico/issues/4557).  Specifically, granted watch to custom resources blockaffinities, ipamblocks & ipamhandles (#7575)

roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2

@@ -63,6 +63,7 @@ rules:
       - create
       - update
       - delete
+      - watch
   # kube-controllers manages hostendpoints.
   - apiGroups: ["crd.projectcalico.org"]
     resources: