feat: update namespaces and add RBAC roles for freeleaps data platform and monitoring systems

Signed-off-by: zhenyus <zhenyus@mathmast.com>

cluster/manifests/freeleaps-controls-system/rbac/rbac.yaml

@@ -0,0 +1,9 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: certificate-contributor
+  namespace: freeleaps-controls-system
+rules:
+  - apiGroups: ["cert-manager.io"]
+    resources: ["certificates"]
+    verbs: ["*"]

cluster/manifests/freeleaps-data-platform/namespace.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: freeleaps-devops-system
+  name: freeleaps-data-platform
   labels:
-    name: freeleaps-devops-system
+    name: freeleaps-data-platform

cluster/manifests/freeleaps-data-platform/rbac/rbac.yaml

@@ -0,0 +1,9 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: data-platform-contributor
+  namespace: freeleaps-data-platform
+rules:
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["*"]

cluster/manifests/freeleaps-monitoring-system/rbac/rbac.yaml

@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: prometheus-rules-contributor
+  namespace: freeleaps-monitoring-system
+rules:
+  - apiGroups: ["monitoring.coreos.com"]
+    resources: ["prometheusrules"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: service-monitor-contributor
+  namespace: freeleaps-monitoring-system
+rules:
+  - apiGroups: ["monitoring.coreos.com"]
+    resources: ["servicemonitors"]
+    verbs: ["*"]