redhat-cop / resource-locker-operator

Apache License 2.0
30 stars 14 forks source link

Helm chart: RoleBinding and ClusterRoleBindings bind to the wrong ServiceAccount #61

Closed Obirah closed 2 years ago

Obirah commented 2 years ago

I'm currently using v1.1.1 of the Helm chart (as a sub-chart in my own chart) and unfortunately, the ServiceAccount references in the rbac.yaml of the Helm chart are broken.

The RoleBinding resource-locker-operator-leader-election-rolebinding and ClusterRoleBindings resource-locker-operator-manager-rolebinding and resource-locker-operator-proxy-rolebinding all bind to the following ServiceAccount:

subjects:
- kind: ServiceAccount
  name: controller-manager
  namespace: system

To my understanding, the correct subject should look like this:

subjects:
- kind: ServiceAccount
  name: resource-locker-operator-controller-manager
  namespace: {{ .Release.Namespace }}
raffaelespazzoli commented 2 years ago

released 1.1.2, can you check if that fixes the issue?

raffaelespazzoli commented 2 years ago

pleas try with v1.1.3