Add role and rolebindings to manage cost-management operator

components/cost-management/base/kustomization.yaml

@@ -4,6 +4,7 @@ resources:
   - costmanagement-metrics-operator.yaml
   - costmanagement-metrics-config.yaml
   - external-service-account-secret.yaml
+  - rbac
 
 commonAnnotations:
   argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true

components/cost-management/base/rbac/cost-management-admin.yaml

@@ -0,0 +1,24 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cost-management-access
+  namespace: costmanagement-metrics-operator
+rules:
+- apiGroups: [""]
+  resources: ["*"]
+  verbs: ["*"]
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: cost-management-access
+  namespace: openshift-logging
+subjects:
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: konflux-cost-management-admins
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: cost-management-access

components/cost-management/base/rbac/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- cost-management-admin.yaml