cyberark / kubernetes-conjur-deploy

Scripts for deploying DAP followers to Kubernetes and OpenShift given an existing DAP master cluster
Apache License 2.0
14 stars 15 forks source link

Create ClusterRoleBinding as part of namespace preparation #129

Closed orenbm closed 4 years ago

orenbm commented 4 years ago

The ClusterRoleBinding was created only after the followers were deployed but there's no reason that it will be created then and not right after we create the ClusterRole.

Furthermore, it was created for a new service-account that was named conjur and was never used. This means that it didn't do anything and the only reason why we didn't see issues is that the docs tell customers to do it manually (while there's no reason they should) and consuming projects (e.g secrets-provider-for-k8s, conjur-authn-k8s-client) created the correct ClusterRoleBinding on their own.