fix(sorcerer): Use the correct ns for jobs

values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml

@@ -21,7 +21,7 @@
   path: /spec/template/spec/containers/0/envFrom/-
   value:
     secretRef:
-      name: prod-sorcerer-env
+      name: beta-sorcerer-env
 - op: add
   path: /spec/template/spec/containers/0/envFrom/-
   value:

values/sorcerer/kustomize/beta-ekman/rbac.yaml

@@ -56,3 +56,42 @@ subjects:
 - kind: ServiceAccount
   name: beta-sorcerer
   namespace: beta-sorcerer
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: beta-sorcerer-prod-queue
+  namespace: prod-queue
+rules:
+- apiGroups:
+  - jobset.x-k8s.io
+  resources:
+  - jobsets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/log
+  verbs:
+  - get
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: beta-sorcerer-prod-queue
+  namespace: prod-queue
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: beta-sorcerer-prod-queue
+subjects:
+- kind: ServiceAccount
+  name: beta-sorcerer
+  namespace: beta-sorcerer