These manifests should live in kube-system; otherwise the label selector won't work.
This entire thing is built in the monitoring namespace but the rolebinding was on default. This caused the operator to never launch.