Commit 9715a2a
authored
fix(helm): Ensure non-default service account name works with namespaces-cache and configmaps-cache role bindings (#557)
Issue #, if available: N/A
Relates to aws-controllers-k8s/kms-controller#83
Description of changes: This change ensures that the required `ClusterRoleBinding` and `RoleBinding` objects apply to a `ServiceAccount` with a custom name.
Error seen with custom service account name:
```
pkg/mod/k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:kms-controller:kms-controller" cannot list resource "configmaps" in API group "" in the namespace "kms-controller"
```
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.1 parent ba12790 commit 9715a2a
1 file changed
+3
-3
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
| 11 | + | |
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
| |||
22 | 22 | | |
23 | 23 | | |
24 | 24 | | |
25 | | - | |
26 | | - | |
| 25 | + | |
| 26 | + | |
0 commit comments