HASI: Limit permissions to read only relevant secrets by KIM [DEADLINE: EOY]

[tobiscr]

Description

KIM should only be allowed to read the secrets which are relevant for it to work. Extensive access to secrets it not required and has to be limited to the minimum.

Allowed secrets are:

• secrets containing KIM configuration parameters
• kubeconfig-secrets of SKRs

AC:

• KIM can access only secrets required by it to work (see list above)

Expected result

KIM is not allowed to read any secrets which are not required by KIM to run/operate.

Actual result

Secret permissions are not fully limited on KCP and KIm could read more as required.

Steps to reproduce

Troubleshooting