fix(system-upgrade): Organise CRD permissions

bootstrap/system-upgrades/clusterrole.yaml

@@ -16,6 +16,13 @@ rules:
   resources:
   - namespaces
   - nodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - "apiextensions.k8s.io"
+  resources:
   - customresourcedefinitions
   verbs:
   - get