Prevent 1.16 deployment from using canary provisioner and attacher images, and use new rbac rules for attacher

Author: msau42

deploy/kubernetes-1.16/canary-blacklist.txt

@@ -1,3 +1,5 @@
 # The following canary images are known to be incompatible with this
 # deployment:
 csi-snapshotter
+csi-attacher
+csi-provisioner

deploy/kubernetes-1.17/hostpath/csi-hostpath-attacher.yaml

@@ -40,7 +40,7 @@ spec:
       serviceAccountName: csi-attacher
       containers:
         - name: csi-attacher
-          image: quay.io/k8scsi/csi-attacher:v2.2.0
+          image: quay.io/k8scsi/csi-attacher:v3.0.0-rc1
           args:
             - --v=5
             - --csi-address=/csi/csi.sock

deploy/kubernetes-1.18/hostpath/csi-hostpath-attacher.yaml

@@ -40,7 +40,7 @@ spec:
       serviceAccountName: csi-attacher
       containers:
         - name: csi-attacher
-          image: quay.io/k8scsi/csi-attacher:v2.2.0
+          image: quay.io/k8scsi/csi-attacher:v3.0.0-rc1
           args:
             - --v=5
             - --csi-address=/csi/csi.sock