KFLUXINFRA-3831: Add konflux-admins to Grafana admin RoleBinding (redhat-appstudio#397)

Grant the konflux-admins group full access to the appstudio-grafana
namespace across all environments. This allows infra admins to
troubleshoot Grafana issues such as removing stuck finalizers on
GrafanaDashboard CRs that block namespace termination.

Assisted-by: Claude Code <noreply@anthropic.com>

Signed-off-by: Gal Levi <glevi@redhat.com>

Author: glevi-rh

components/monitoring/grafana/external-production/rbac/grafana-admin.yaml

@@ -30,6 +30,9 @@ subjects:
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
   name: konflux-o11y-admins
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: konflux-admins
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

components/monitoring/grafana/external-staging/rbac/grafana-admin.yaml

@@ -30,6 +30,9 @@ subjects:
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
   name: konflux-o11y-admins
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: konflux-admins
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

components/monitoring/grafana/internal-production/rbac/grafana-admin.yaml

@@ -30,6 +30,9 @@ subjects:
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
   name: konflux-o11y-admins
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: konflux-admins
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

components/monitoring/grafana/internal-staging/rbac/grafana-admin.yaml

@@ -30,6 +30,9 @@ subjects:
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
   name: konflux-o11y-admins
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: konflux-admins
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role