Calico: update crds to v1 and cr (#6360)

* Update CustomResourceDefinition for kubecontrollersconfigurations.crd.projectcalico.org to v1
* Align ClusterRole for kube-controllers with upstream (calico)

roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-cr.yml.j2

@@ -57,6 +57,15 @@ rules:
       - blockaffinities
       - ipamblocks
       - ipamhandles
+    verbs:
+      - get
+      - list
+      - create
+      - update
+      - delete
+  # kube-controllers manages hostendpoints.
+  - apiGroups: ["crd.projectcalico.org"]
+    resources:
       - hostendpoints
     verbs:
       - get
@@ -72,7 +81,6 @@ rules:
       - get
       - create
       - update
-{% endif %}
 {% if calico_version is version('v3.14.0', '>=') %}
   # KubeControllersConfiguration is where it gets its config
   - apiGroups: ["crd.projectcalico.org"]
@@ -88,3 +96,4 @@ rules:
       # watch for changes
       - watch
 {% endif %}
+{% endif %}