Setup roles and access

[ranguard]

Good tutorial:

https://imti.co/team-kubernetes-remote-access/

Docs:

https://kubernetes.io/docs/reference/access-authn-authz/rbac/

Note:

Long term we want to be able to host other Perl projects, so want to be thinking about permissions on that basis

[ssoriche]

I made another todo for kubeguard. This would allow us to use GitHub and its auths for kubernetes.

[ranguard]

I think this ticket was originally for letting other Perl projects use our cluster.. that said it might just be "You tell us where the images are and we'll do the rest", so wouldn't need access to the cluster mechanisms them selves?

The KubeGuard ticket covers giving access to lower levels via github.

Not sure what best practice will be here, and low priority as focus in MetaCPAN stuff first