1. add a "namespace" parameter to the template
2. add the role and rolebinding to cna-management/templates/service-template.yaml
3. (need to parametrize the target namespace)
4. remove the role and rolebinding from app-interface (both stage and integration)
5. possibly add new types of resources to be created form the cna-management repo
6. pass the namespace parameter from the deployment (data/services/cna/cicd/deploy.yaml)
7. probably merge the cna-management first (will fail on duplicate resources in openshift??)
7. have the changes to app-interface merged to fix the situation