Implementing cronJob permission changes (#5481)

* Implementing cronJob permission changes

Implements ASC-771

Changing kubesaw tiers and konflux RBAC to reflect new requiremens
for cronJob management in tenant namespaces. This consitent with changes
in architecture ADR: konflux-ci/architecture#222

Signed-off-by: David Peraza <[email protected]>

* Remove double quotes from api group

Signed-off-by: David Peraza <[email protected]>

---------

Signed-off-by: David Peraza <[email protected]>

Author: dperaza4dustbit

components/konflux-rbac/production/base/konflux-admin-user-actions.yaml

@@ -142,3 +142,16 @@ rules:
       - project.openshift.io
     resources:
       - projects
+  - verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+    apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs

components/konflux-rbac/production/base/konflux-contributor-user-actions.yaml

@@ -114,3 +114,12 @@ rules:
       - project.openshift.io
     resources:
       - projects
+  - verbs:
+      - get
+      - list
+      - watch
+    apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs

components/konflux-rbac/production/base/konflux-maintainer-user-actions.yaml

@@ -128,3 +128,15 @@ rules:
       - project.openshift.io
     resources:
       - projects
+  - verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+    apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs

components/konflux-rbac/staging/base/konflux-admin-user-actions.yaml

@@ -141,3 +141,16 @@ rules:
       - project.openshift.io
     resources:
       - projects
+  - verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+    apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs

components/konflux-rbac/staging/base/konflux-contributor-user-actions.yaml

@@ -113,3 +113,12 @@ rules:
       - project.openshift.io
     resources:
       - projects
+  - verbs:
+      - get
+      - list
+      - watch
+    apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs

components/konflux-rbac/staging/base/konflux-maintainer-user-actions.yaml

@@ -127,3 +127,15 @@ rules:
       - project.openshift.io
     resources:
       - projects
+  - verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+    apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs

components/sandbox/tiers/production/appstudio/kustomization.yaml

@@ -8,14 +8,17 @@ resources:
 - nstemplatetier-appstudio.yaml
 - tiertemplate-appstudio-admin-1611646139-1611646139.yaml
 - tiertemplate-appstudio-admin-1876853981-1876853981.yaml
+- tiertemplate-appstudio-admin-2267910203-2267910203.yaml
 - tiertemplate-appstudio-admin-2415879015-2415879015.yaml
 - tiertemplate-appstudio-admin-849337768-849337768.yaml
 - tiertemplate-appstudio-clusterresources-3180033938-3180033938.yaml
 - tiertemplate-appstudio-clusterresources-593233715-593233715.yaml
 - tiertemplate-appstudio-clusterresources-809836689-809836689.yaml
 - tiertemplate-appstudio-contributor-1817914940-1817914940.yaml
+- tiertemplate-appstudio-contributor-2153673317-2153673317.yaml
 - tiertemplate-appstudio-contributor-3265408548-3265408548.yaml
 - tiertemplate-appstudio-contributor-829105171-829105171.yaml
+- tiertemplate-appstudio-maintainer-1446367252-1446367252.yaml
 - tiertemplate-appstudio-maintainer-1881194462-1881194462.yaml
 - tiertemplate-appstudio-maintainer-1904354742-1904354742.yaml
 - tiertemplate-appstudio-maintainer-293087644-293087644.yaml

components/sandbox/tiers/production/appstudio/nstemplatetier-appstudio.yaml

@@ -14,11 +14,11 @@ spec:
   - templateRef: appstudio-tenant-3035149355-3035149355
   spaceRoles:
     admin:
-      templateRef: appstudio-admin-1611646139-1611646139
+      templateRef: appstudio-admin-2267910203-2267910203
     contributor:
-      templateRef: appstudio-contributor-3265408548-3265408548
+      templateRef: appstudio-contributor-2153673317-2153673317
     maintainer:
-      templateRef: appstudio-maintainer-1881194462-1881194462
+      templateRef: appstudio-maintainer-1446367252-1446367252
     viewer:
       templateRef: appstudio-viewer-3768244154-3768244154
 status: {}