Remove K8s RBAC

We do not need to use RBAC to read secrets.

See #3607

Author: sciurus

infrastructure/tooling/src/dev/helm.js

@@ -5,8 +5,6 @@ const resourceTypes = [
   'cronjob',
   'deployment',
   'ingress',
-  'rolebinding',
-  'role',
   'secret',
   'serviceaccount',
   'service',

infrastructure/tooling/src/generate/generators/k8s.js

@@ -101,7 +101,7 @@ const renderTemplates = async (name, vars, procs, templates) => {
   await rimraf(TMPL_DIR);
   await mkdirp(TMPL_DIR);
 
-  for (const resource of ['role', 'rolebinding', 'serviceaccount', 'secret']) {
+  for (const resource of ['serviceaccount', 'secret']) {
     const rendered = jsone(templates[resource], {
       projectName: `taskcluster-${name}`,
       labels: labels(`taskcluster-${name}`, 'secrets'),