fix: NVSHAS-9442 issues on argocd

On ArgoCD, no default annotations would be created, which fails the
attempt to update annotations from cert upgrader.

This issue is fixed by providing the default annotation to cert
upgrader's cronjob.

Also adding lease.create permission so lease can be created on ArgoCD
when no lease object is created.

Author: holyspectral

charts/core/templates/role.yaml

@@ -47,6 +47,7 @@ rules:
   resources:
   - leases
   verbs:
+  - create
   - get
   - update
 ---

charts/core/templates/upgrader-cronjob.yaml

@@ -10,6 +10,8 @@ kind: CronJob
 metadata:
   name: neuvector-cert-upgrader-pod
   namespace: {{ .Release.Namespace }}
+  annotations:
+    cert-upgrader-uid: ""
   labels:
     chart: {{ template "neuvector.chart" . }}
     release: {{ .Release.Name }}