Allow Powerusers to list Namespaces...

...as we intend to limit the number of "full admins", Powerusers need
 to be able to do things like get/list namespaces in EKS.

terraform/deployments/cluster-services/aws_auth_configmap.tf

@@ -127,11 +127,18 @@ resource "kubernetes_cluster_role_binding" "read_crs_and_crbs" {
 
 resource "kubernetes_cluster_role" "poweruser" {
   metadata { name = "poweruser" }
+
   rule {
     api_groups = ["*"]
     resources  = ["*"]
     verbs      = ["*"]
   }
+
+  rule {
+    api_groups = [""]
+    resources  = ["namespaces"]
+    verbs      = ["get", "list"]
+  }
 }
 
 resource "kubernetes_role_binding" "poweruser" {