Delay role/rolebinding creation to gha-runner-scale-set installation time

[TingluoHuang]

Part 2 of #2275

• Keep ClusterRole/ClusterRoleBinding to manage CRD and List/Watch low-risk resources.
• New Role/RoleBinding to make sure the manager has permission to create an AutoScalingListener in the controller installed namespace.
• New Role/RoleBinding to make sure the manager has permission to do everything in the namespace where the gha-runner-scale-set is installed.

[TingluoHuang]

the Check (Validate Helm Chart / Lint Chart (push)) is failing because we haven't published any image that supports trimming permission down.

[wherka-ama]

the Check (Validate Helm Chart / Lint Chart (push)) is failing because we haven't published any image that supports trimming permission down.

@TingluoHuang : thanks for your great work! Much appreciated.

Any idea on the timeline please? Do you know when this version will become generally available?

[uhthomas]

This is exactly the change we've been looking for before deploying the controller in our cluster, thank you for your effort. Is it possible to remove the cluster roles entirely?

[TingluoHuang]

This is exactly the change we've been looking for before deploying the controller in our cluster, thank you for your effort. Is it possible to remove the cluster roles entirely?

@uhthomas #2374 can remove the cluster role, but the trade off is the controller can only create AutoScalingRunnerSet in a single pre-defined namespace.

[uhthomas]

This is exactly the change we've been looking for before deploying the controller in our cluster, thank you for your effort. Is it possible to remove the cluster roles entirely?

@uhthomas #2374 can remove the cluster role, but the trade off is the controller can only create AutoScalingRunnerSet in a single pre-defined namespace.

Awesome, thank you. This is exactly what we are looking for. We have very strict access controls and intend to run the operator in a single predefined namespace. Is there anything I can do to help get this over the line?

[rentziass]

Left a few nits but looks good to me!

[nikola-jokic]

LGTM! 🚀