rbac: fix kubectl validation error

The files worked fine in automated testing, but kubectl complains
about the missing apiGroup.

Author: pohly

deploy/kubernetes/rbac.yaml

@@ -87,3 +87,4 @@ subjects:
 roleRef:
   kind: Role
   name: external-provisioner-cfg
+  apiGroup: rbac.authorization.k8s.io