projectcalico / canal

Policy based networking for cloud native applications
717 stars 100 forks source link

remove namespace from ClusterRoleBinding specs #105

Closed davemac30 closed 7 years ago

davemac30 commented 7 years ago

ClusterRoleBinding is not namespaced:

$ kubectl get clusterrolebindings --all-namespaces
NAMESPACE   NAME      AGE
error: clusterRoleBinding is not namespaced

It doesn't cause an error when using kubectl create - I'm guessing it just gets silently ignored, but...

I created a script to process these manifests and convert them to ansible code which posts to the API using the ansible uri module. The script chooses the API path to post to depending (amongst other things) on the presence of the namespace in the metadata. The clusterrolebindings in the canal manifests fail for this reason.