Install/configure common components of the pentest clusters

[SamLR]

The two pentest clusters (#12) need common configuration installed on them:

• k8s RBAC - the recommended gitops RBAC
  • A readonly cluster role (e.g. https://github.com/weaveworks/weave-gitops-clusters/blob/main/k8s/apps/core/dex/readonly-cluster-role.yaml)
  • A user with cluster-admin permissions
  • A user with wego-admin-role permissions bound to the app namespace
  • A user with cluster-wide readonly permissions
  • A user with readonly permissions bound to the app namespace
• OIDC configuration (I'd suggest this be Dex with static passwords, e.g. https://github.com/weaveworks/weave-gitops-scenarios/blob/main/scenarios/dex/release.yaml#L28-L36 configured to pass groups)
  • nb users are used rather than groups because dex doesn't allow setting groups for static password users
• An app namespace containing (these are to provide targets for attacks):
  • a secret
  • a config map
  • a deployment