It should be part of the CSV and then OLM will create it. In the CSV are two separate areas "cluster permissions" and "permissions" (this one is for the namespace). See https://github.com/integr8ly/manifests/blob/master/integreatly-unifiedpush/unifiedpush-operator-0.2.0/unifiedpush-operator.v0.2.0.clusterserviceversion.yaml for an example