fix: Bind resources to the namespace

.github/workflows/helm-chart.yml

@@ -128,6 +128,8 @@ jobs:
           output_format: cli,sarif
           output_file_path: console,results.sarif
           soft_fail: true
+        env: 
+          HELM_NAMESPACE: no-default-namespace
 
       - name: Template chart
         # temporary disabled due to https://github.com/zegl/kube-score/issues/559

helm/flowforge/templates/configmap.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: flowforge-config
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "forge.labels" . | nindent 4 }}
 data:

helm/flowforge/templates/deployment.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: flowforge
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "forge.labels" . | nindent 4 }}
     {{- with .Values.forge.labels }}

helm/flowforge/templates/file-storage.yml

@@ -4,7 +4,6 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: file-storage-pvc
-  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
 spec:

helm/flowforge/templates/network-policy.yaml

@@ -3,7 +3,6 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   name: flowforge-database-policy
-  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
 spec:

helm/flowforge/templates/private-ca.yaml

@@ -3,7 +3,6 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: {{ .Values.forge.privateCA.configMapName | default "ff-ca-certs"}}
-  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
 data:

helm/flowforge/templates/service-account.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: flowforge
+  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
   {{- if .Values.forge.cloudProvider }}
@@ -34,6 +35,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: {{ ((.Values.forge).clusterRole).name | default "create-pod" }}
+  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
 rules:
@@ -60,13 +62,12 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name:  {{ ((.Values.forge).clusterRole).name | default "create-pod" }}
-  namespace: {{ .Values.forge.projectNamespace }}
+  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
 subjects:
 - kind: ServiceAccount
   name: flowforge
-  namespace: {{ .Release.Namespace }}
 roleRef:
   kind: ClusterRole
   name:  {{ ((.Values.forge).clusterRole).name | default "create-pod" }}

helm/flowforge/templates/service-ingress.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: forge
+  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
 spec:
@@ -17,6 +18,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: flowforge-ingress
+  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
   annotations:
@@ -53,6 +55,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: flowforge-ingress-api-devices
+  namespace: {{ .Release.Namespace }}
   labels:
   {{- include "forge.labels" . | nindent 4 }}
   annotations: