apps

This patch removes the custom reconciler role and replaces it with the
general admin ClusterRole, this helps to restrict access to only the
save namespace resources.