feat(wayne-access-to-demeter-cluster): Added Cluster Role and cluster rolebinding

Signed-off-by: Tripura Repalle <tripura@blinklabs.io>

Author: tripura-repalle

charts/rbac/templates/clusterrole.yaml

@@ -0,0 +1,17 @@
+{{- range $name, $data := .Values.clusterRoles }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ $name }}
+  {{- with $data.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with $data.labels }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+rules:
+  {{- toYaml (default (list) $data.rules) | nindent 2 }}
+{{- end }}

charts/rbac/templates/clusterrolebinding.yaml

@@ -0,0 +1,21 @@
+{{- range $name, $data := .Values.clusterRoleBindings }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ $name }}
+  {{- with $data.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with $data.labels }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: {{ default "ClusterRole" $data.roleKind }}
+  name: {{ required (printf "Values.clusterRoleBindings.%s.roleName is required" $name) $data.roleName }}
+subjects:
+  {{- toYaml (default (list) $data.subjects) | nindent 2 }}
+{{- end }}

charts/rbac/values.yaml

@@ -36,3 +36,24 @@ roleBindings: {}
 #    - kind: ServiceAccount
 #      name: my-svcacct
 #      namespace: my-namespace
+
+clusterRoles: {}
+#  my-clusterrole:
+#    rules:
+#    - apiGroups:
+#      - ""
+#      resources:
+#      - namespaces
+#      verbs:
+#      - get
+#      - list
+#      - watch
+
+clusterRoleBindings: {}
+#  my-clusterrolebinding:
+#    roleName: my-clusterrole
+#    roleKind: ClusterRole
+#    subjects:
+#    - kind: User
+#      name: user@example.com
+#      apiGroup: rbac.authorization.k8s.io