Changed
- Update
read-allClusterRole on every bootstrap. - Extend
rbac-operatorservice account ClusterRole permissions to namespaces.
read-all ClusterRole on every bootstrap.rbac-operator service account ClusterRole permissions to namespaces.view-all related roles/bindings.cluster-admin cluster role in target organization namespace.