Improve listing resources in authorized namespaces

[georgethebeatle]

Background

When listing resources we have established the pattern of

• listing all namespaces where the user has any role bindings
• synchronously looping over thos namespaces listing all resources in each namespace

The goal of this pattern is to prevent the listing of resources that the user may not have permissions to see

The problem with this approach is performance - it is suboptimal to do so many requests and the overall time of listing grows linearly with the number of spaces.

Proposal

Use the admin client to do a cluster-wide list as follows:

• Collect a list of all namespaces where the user has any permissions
• Using the admin client do a cluster-wide list with label selectors that filter by .metadata.namespace being in the set of authorized namespaces

TODO

• Add smoke tests for listing all resources with and without permissions
• Write a ginkgo Measure test for listing apps and run with 1, 10, 100 and 1000 orgs/spaces containing one app