finer-grained RBAC

Thomas Morinrequested to merge
refine-rbac into main

This MR builds on top of !1 (merged).

It makes the RBAC more fine-grained, giving less k8s privileges to the sync-openstack-images job.

Edited by Thomas Morin

Merge request reports