Extract out permissions for fission.io componenets per-component (#2570)

* Extract out permissions for fission.io components per-component

* PR review changes

* Fix file names

* Fix the filename for the router

charts/fission-all/templates/executor/clusterrole-fission-cr.yaml

@@ -0,0 +1,32 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Release.Name }}-executor-fission-cr
+rules:
+- apiGroups:
+  - fission.io
+  resources:
+  - environments
+  - functions
+  - packages
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Release.Name }}-executor-fission-cr
+subjects:
+  - kind: ServiceAccount
+    name: fission-executor
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Release.Name }}-executor-fission-cr
+  apiGroup: rbac.authorization.k8s.io

charts/fission-all/templates/executor/clusterrole.yaml

@@ -1,7 +1,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: {{ .Release.Name }}-fission-cr-executor
+  name: {{ .Release.Name }}-executor
 rules:
 - apiGroups:
   - ""
@@ -42,20 +42,6 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - fission.io
-  resources:
-  - environments
-  - functions
-  - packages
-  verbs:
-  - create
-  - get
-  - list
-  - watch
-  - update
-  - patch
-  - delete
 - apiGroups:
   - autoscaling
   resources:

charts/fission-all/templates/executor/clusterrolebinding.yaml

@@ -1,12 +1,12 @@
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: {{ .Release.Name }}-fission-cr-executor
+  name: {{ .Release.Name }}-executor
 subjects:
   - kind: ServiceAccount
     name: fission-executor
     namespace: {{ .Release.Namespace }}
 roleRef:
   kind: ClusterRole
-  name: {{ .Release.Name }}-fission-cr-executor
+  name: {{ .Release.Name }}-executor
   apiGroup: rbac.authorization.k8s.io