Remove pre-defined role for service accounts

[lingyzhuang]

In _common/_service-account.tpl file:

1. Create ServiceAccount
2. Create ClusterRole with permissions read/create/delete/patch to secrets. Bind this role to namespaces .Release.Namespace and tssc
3. Create read-only ClusterRole, do ClusterRoleBinding for this role
4. RoleBinding binds a role to a specific namespace (.Release.Namespace）

Remove Cluster-admin ClusterRole, use read-only ClusterRole and secret read-write ClusterRole instead.

ServiceAccount in chart tssc-gitops needs all verbs to all the resources to do some configurations, so create a Role and bind it to namespace tssc-gitops.

Jira: RHTAP-4880

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Roming22]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lingyzhuang, Roming22

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [Roming22]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[konflux-ci-qe-bot]

@lingyzhuang: The following test has Failed, say /retest to rerun failed tests.

PipelineRun Name	Status	Rerun command	Build Log	Test Log
e2e-4.17-jm4z5	Failed	/retest	View Pipeline Log	View Test Logs

Inspecting Test Artifacts

To inspect your test artifacts, follow these steps:

1. Install ORAS (see the ORAS installation guide).
2. Download artifacts with the following commands:

mkdir -p oras-artifacts
cd oras-artifacts
oras pull quay.io/konflux-test-storage/rhtap-team/rhtap-cli:e2e-4.17-jm4z5

Test results analysis

<not enabled>