RBAC lab updates

bundle.yaml

@@ -1,5 +1,5 @@
 apiVersion: "1"
-version: "3"
+version: "4"
 id: "cloudbees-ci-workshop-controller"
 description: "CloudBees CI configuration bundle for the CloudBees CI Workshop"
 availabilityPattern: "cloudbees-ci-workshop/mqackermannc/controller"
@@ -11,3 +11,5 @@ catalog:
   - "plugin-catalog.yaml"
 items:
   - "items.yaml"
+rbac:
+  - "rbac.yaml"

jenkins.yaml

@@ -13,7 +13,7 @@ jenkins:
       - key: "BUNDLE_ID"
         value: "${CASC_BUNDLE_ID}"
   quietPeriod: 0
-  systemMessage: 'Jenkins configured using CloudBees CI CasC - v3'
+  systemMessage: 'Jenkins configured using CloudBees CI CasC - v4'
 globalCloudBeesPipelineTemplateCatalog:
   catalogs:
   - branchOrTag: "main"
@@ -53,7 +53,7 @@ unclassified:
     durabilityHint: PERFORMANCE_OPTIMIZED
   globallibraries:
     libraries:
-    - defaultVersion: "main"
+    - defaultVersion: "module-2"
       name: "pipeline-library"
       retriever:
         modernSCM:
@@ -94,7 +94,7 @@ kube:
       - emptyDirVolume:
           memory: false
           mountPath: "/var/maven/"
-      yamlMergeStrategy: "override"
+      yamlMergeStrategy: "override"    
 credentials:
   system:
     domainCredentials:

rbac.yaml

@@ -0,0 +1,54 @@
+removeStrategy:
+  rbac: SYNC
+roles:
+- name: authenticated
+  filterable: 'true'
+  permissions:
+  - hudson.model.Hudson.Read
+  - hudson.model.Item.Read
+  - hudson.model.View.Read
+- name: administrator
+  permissions:
+  - hudson.model.Hudson.Administer
+- name: manager
+  filterable: 'true'
+  permissions:
+  - hudson.model.Hudson.Manage
+  - nectar.plugins.rbac.roles.Role.View
+  - hudson.model.Hudson.SystemRead
+  - com.cloudbees.plugins.credentials.CredentialsProvider.View
+  - com.cloudbees.jenkins.plugin.metrics.views.Alerter.View
+  - com.cloudbees.pipeline.governance.templates.catalog.TemplateCatalogAction.ViewCatalogs
+  - nectar.plugins.rbac.groups.Group.View
+- name: user
+  filterable: 'true'
+  permissions:
+  - hudson.model.Item.Create
+  - hudson.model.Item.Configure
+  - hudson.model.Item.Read
+  - hudson.model.Item.Build
+groups:
+- name: Administrators
+  members:
+    users:
+    - admin
+    - team-admin
+    - ackermannc-admin
+  roles:
+  - name: administrator
+    grantedAt: current
+- name: Managers
+  members:
+    users:
+    - ackermannc
+  roles:
+  - name: manager
+    grantedAt: current
+- name: Users
+  members:
+    users:
+    - ackermannc
+  roles:
+  - name: user
+    grantedAt: child
+