Enabling multi-tenancy for fission objects. (#655)

This feature allows creation of fission objects in different namespaces, in addition to retaining the existing behavior of creating fission objects in default namespace if user doesnt provide one. 
It also removes cluster admin roles for fission-fetcher and fission-builder Service Accounts and grants them only those privileges that they need.

mqtrigger/messageQueue/asq.go

@@ -210,10 +210,13 @@ func (asc AzureStorageConnection) subscribe(trigger *crd.MessageQueueTrigger) (m
 		queue:           asc.service.GetQueue(trigger.Spec.Topic),
 		queueName:       trigger.Spec.Topic,
 		outputQueueName: trigger.Spec.ResponseTopic,
-		functionURL:     asc.routerURL + "/" + strings.TrimPrefix(fission.UrlForFunction(trigger.Spec.FunctionReference.Name), "/"),
-		contentType:     trigger.Spec.ContentType,
-		unsubscribe:     make(chan bool),
-		done:            make(chan bool),
+		// with the addition of multi-tenancy, the users can create functions in any namespace. however,
+		// the triggers can only be created in the same namespace as the function.
+		// so essentially, function namespace = trigger namespace.
+		functionURL: asc.routerURL + "/" + strings.TrimPrefix(fission.UrlForFunction(trigger.Spec.FunctionReference.Name, trigger.Metadata.Namespace), "/"),
+		contentType: trigger.Spec.ContentType,
+		unsubscribe: make(chan bool),
+		done:        make(chan bool),
 	}
 
 	go runAzureQueueSubscription(asc, subscription)

mqtrigger/messageQueue/asq_test.go

@@ -284,7 +284,8 @@ func TestAzureStorageQueuePoisonMessage(t *testing.T) {
 	}
 	subscription, err := connection.subscribe(&crd.MessageQueueTrigger{
 		Metadata: metav1.ObjectMeta{
-			Name: TriggerName,
+			Name:      TriggerName,
+			Namespace: metav1.NamespaceDefault,
 		},
 		Spec: fission.MessageQueueTriggerSpec{
 			FunctionReference: fission.FunctionReference{
@@ -427,7 +428,8 @@ func runAzureStorageQueueTest(t *testing.T, count int, output bool) {
 	}
 	subscription, err := connection.subscribe(&crd.MessageQueueTrigger{
 		Metadata: metav1.ObjectMeta{
-			Name: TriggerName,
+			Name:      TriggerName,
+			Namespace: metav1.NamespaceDefault,
 		},
 		Spec: fission.MessageQueueTriggerSpec{
 			FunctionReference: fission.FunctionReference{

mqtrigger/messageQueue/nats.go

@@ -100,7 +100,10 @@ func msgHandler(nats *Nats, trigger *crd.MessageQueueTrigger) func(*ns.Msg) {
 				trigger.Spec.FunctionReference.Type, trigger.Metadata.Name)
 		}
 
-		url := nats.routerUrl + "/" + strings.TrimPrefix(fission.UrlForFunction(trigger.Spec.FunctionReference.Name), "/")
+		// with the addition of multi-tenancy, the users can create functions in any namespace. however,
+		// the triggers can only be created in the same namespace as the function.
+		// so essentially, function namespace = trigger namespace.
+		url := nats.routerUrl + "/" + strings.TrimPrefix(fission.UrlForFunction(trigger.Spec.FunctionReference.Name, trigger.Metadata.Namespace), "/")
 		log.Printf("Making HTTP request to %v", url)
 
 		headers := map[string]string{