refactor(apps): Unify flux-reconciler service account

This patch renames a bunch of service accounts and role bindings, that
were previously individual to the namespace, now using `flux-reconciler`
everywhere with idential permissions.

Further adjustments needed to make it a shared resource, currently the
requirement to have the namespace in the rolebinding makes this hard.
Have to investigate.

apps/base/forecastle/namespace.yaml

@@ -13,13 +13,13 @@ metadata:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: forecastle-reconciler
+  name: flux-reconciler
   namespace: forecastle
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: forecastle-reconciler
+  name: flux-reconciler
   namespace: forecastle
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -27,5 +27,5 @@ roleRef:
   name: admin
 subjects:
   - kind: ServiceAccount
-    name: forecastle-reconciler
+    name: flux-reconciler
     namespace: forecastle

apps/base/gitlab-runner/namespace.yaml

@@ -8,13 +8,13 @@ metadata:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: gitlab-runner-reconciler
+  name: flux-reconciler
   namespace: gitlab-runner
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: gitlab-runner-reconciler
+  name: flux-reconciler
   namespace: gitlab-runner
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -22,5 +22,5 @@ roleRef:
   name: admin
 subjects:
   - kind: ServiceAccount
-    name: gitlab-runner-reconciler
+    name: flux-reconciler
     namespace: gitlab-runner

apps/base/gitlab-runner/release.yaml

@@ -4,7 +4,7 @@ metadata:
   name: gitlab-runner
   namespace: gitlab-runner
 spec:
-  serviceAccountName: gitlab-runner-reconciler
+  serviceAccountName: flux-reconciler
   timeout: 15m
   releaseName: gitlab-runner
   chart:

apps/base/keycloak/namespace.yaml

@@ -6,13 +6,13 @@ metadata:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: keycloak-reconciler
+  name: flux-reconciler
   namespace: keycloak
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: keycloak-reconciler
+  name: flux-reconciler
   namespace: keycloak
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -20,5 +20,5 @@ roleRef:
   name: admin
 subjects:
   - kind: ServiceAccount
-    name: keycloak-reconciler
+    name: flux-reconciler
     namespace: keycloak

apps/base/keycloak/release.yaml

@@ -4,7 +4,7 @@ metadata:
   name: keycloak
   namespace: keycloak
 spec:
-  serviceAccountName: keycloak-reconciler
+  serviceAccountName: flux-reconciler
   releaseName: keycloak
   chart:
     spec:

apps/base/matrix/namespace.yaml

@@ -8,13 +8,13 @@ metadata:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: matrix-reconciler
+  name: flux-reconciler
   namespace: matrix
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: matrix-reconciler
+  name: flux-reconciler
   namespace: matrix
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -22,5 +22,5 @@ roleRef:
   name: admin
 subjects:
   - kind: ServiceAccount
-    name: matrix-reconciler
+    name: flux-reconciler
     namespace: matrix

apps/base/matrix/release.yaml

@@ -4,7 +4,7 @@ metadata:
   name: matrix-synapse
   namespace: matrix
 spec:
-  serviceAccountName: matrix-reconciler
+  serviceAccountName: flux-reconciler
   timeout: 15m
   releaseName: matrix-synapse
   chart:

apps/base/nextcloud/namespace.yaml

@@ -8,13 +8,13 @@ metadata:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: nextcloud-reconciler
+  name: flux-reconciler
   namespace: nextcloud
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: nextcloud-reconciler
+  name: flux-reconciler
   namespace: nextcloud
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -22,5 +22,5 @@ roleRef:
   name: admin
 subjects:
   - kind: ServiceAccount
-    name: nextcloud-reconciler
+    name: flux-reconciler
     namespace: nextcloud

apps/base/nextcloud/release.yaml

@@ -4,7 +4,7 @@ metadata:
   name: nextcloud
   namespace: nextcloud
 spec:
-  serviceAccountName: nextcloud-reconciler
+  serviceAccountName: flux-reconciler
   timeout: 5m
   releaseName: nextcloud
   chart: