Change all clusterroles to have endpoints permissions and reduced events permissions, consolidate where possible

(cherry picked from commit f46a12bccb3af6e2f4908332b2acad2963fc1ab0)