Extract out permissions for fission.io componenets per-component (#2570)

* Extract out permissions for fission.io components per-component

* PR review changes

* Fix file names

* Fix the filename for the router

charts/fission-all/templates/timer/clusterrole-fission-cr.yaml

@@ -0,0 +1,33 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Release.Name }}-timer-fission-cr
+rules:
+- apiGroups:
+  - fission.io
+  resources:
+  - environments
+  - functions
+  - packages
+  - timetriggers
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Release.Name }}-timer-fission-cr
+subjects:
+  - kind: ServiceAccount
+    name: fission-timer
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Release.Name }}-timer-fission-cr
+  apiGroup: rbac.authorization.k8s.io

charts/fission-all/templates/timer/clusterrole.yaml

@@ -1,7 +1,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: {{ .Release.Name }}-fission-cr-timer
+  name: {{ .Release.Name }}-timer
 rules:
 - apiGroups:
   - ""
@@ -20,21 +20,6 @@ rules:
   - list
   - watch
   - patch
-- apiGroups:
-  - fission.io
-  resources:
-  - environments
-  - functions
-  - packages
-  - timetriggers
-  verbs:
-  - create
-  - get
-  - list
-  - watch
-  - update
-  - patch
-  - delete
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:

charts/fission-all/templates/timer/clusterrolebinding.yaml

@@ -1,12 +1,12 @@
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: {{ .Release.Name }}-fission-cr-timer
+  name: {{ .Release.Name }}-timer
 subjects:
   - kind: ServiceAccount
     name: fission-timer
     namespace: {{ .Release.Namespace }}
 roleRef:
   kind: ClusterRole
-  name: {{ .Release.Name }}-fission-cr-timer
+  name: {{ .Release.Name }}-timer
   apiGroup: rbac.authorization.k8s.io