Refactoring Role-based Access Control

Current implementation of RBAC injects a separate clusterrole and clusterrolebinding with its own secret per chart. This leads to a few issues, to name a few: (a) resources are orphaned when charts are deleted; (b) role name collision as clusterroles are not namespaced. This BP proposes to remove the additional role and add namespace separation as well as remove resources that the roles do not need access for to enforce principle of least privilege.