Improve install experience (#311)

* Improve install experience

* Fix service account

* Add instructions on using brew to install the CLI

docs/cli.md

@@ -38,7 +38,12 @@ This document demonstrates how to use the CLI but also shows what happens in `KU
 
 ### Install
 
-Install the plugin from your `$GOPATH/src/github.com/kudobuilder/kudo` root folder via:
+You can either install the CLI plugin using `brew`:
+
+- `homebrew tap kudobuilder/tap`
+- `brew install kudo-cli`
+
+Or you can use compile and install the plugin from your `$GOPATH/src/github.com/kudobuilder/kudo` root folder via:
 
 - `make cli-install`
 

docs/deployment/00-prereqs.yaml

@@ -0,0 +1,131 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    controller-tools.k8s.io: "1.0"
+  name: kudo-system
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app: kudo-manager
+  name: kudo-manager
+  namespace: kudo-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: kudo-manager-role
+rules:
+- apiGroups:
+  - kudo.k8s.io
+  resources:
+  - frameworks
+  - frameworkversions
+  - instances
+  - planexecutions
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  - statefulsets
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  - events
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - patch
+- apiGroups:
+  - policy
+  resources:
+  - poddisruptionbudgets
+  - poddisruptionbudgets.policy
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  - validatingwebhookconfigurations
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  - services
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  creationTimestamp: null
+  name: kudo-manager-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kudo-manager-role
+subjects:
+- kind: ServiceAccount
+  name: kudo-manager
+  namespace: kudo-system
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: kudo-webhook-server-secret
+  namespace: kudo-system