[calico] add v3.23.2 and make it default (#9041)

roles/network_plugin/calico/templates/calico-cr.yml.j2

@@ -157,4 +157,12 @@ rules:
       - daemonsets
     verbs:
       - get
+  # Used for creating service account tokens to be used by the CNI plugin
+  - apiGroups: [""]
+    resources:
+      - serviceaccounts/token
+    resourceNames:
+      - calico-node
+    verbs:
+      - create
 {% endif %}