[cilium] add custom vars for clusterrole cilium operator (#10267)

inventory/sample/group_vars/k8s_cluster/k8s-net-cilium.yml

@@ -243,3 +243,22 @@
 
 # -- Whether to enable CNP status updates.
 # cilium_disable_cnp_status_updates: true
+
+# A list of extra rules variables to add to clusterrole for cilium operator, formatted like:
+#   cilium_clusterrole_rules_operator_extra_vars:
+#     - apiGroups:
+#       - '""'
+#       resources:
+#       - pods
+#       verbs:
+#       - delete
+#     - apiGroups:
+#       - '""'
+#       resources:
+#       - nodes
+#       verbs:
+#       - list
+#       - watch
+#       resourceNames:
+#       - toto
+# cilium_clusterrole_rules_operator_extra_vars: []