fix(helm): Fix "Label exempted namespaces" (#2290)

Fix the RBAC for labeling namespace for post upgrade job Signed-off-by: Zhimin Xiang <xiangzhimin1010@gmail.com> Signed-off-by: Zhimin Xiang <xiangzhimin1010@gmail.com>
open-policy-agent · Sep 30, 2022 · 55a1bd5 · 55a1bd5
1 parent 512d97e
commit 55a1bd5
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/cmd/build/helmify/static/templates/namespace-post-upgrade.yaml b/cmd/build/helmify/static/templates/namespace-post-upgrade.yaml
@@ -73,7 +73,7 @@ metadata:
 ---
 {{- if .Values.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: gatekeeper-update-namespace-label-post-upgrade
   labels:
@@ -101,7 +101,7 @@ rules:
 ---
 {{- if .Values.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: gatekeeper-update-namespace-label-post-upgrade
   labels:
@@ -113,7 +113,7 @@ metadata:
     "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
+  kind: ClusterRole
   name: gatekeeper-update-namespace-label-post-upgrade
 subjects:
   - kind: ServiceAccount

diff --git a/manifest_staging/charts/gatekeeper/templates/namespace-post-upgrade.yaml b/manifest_staging/charts/gatekeeper/templates/namespace-post-upgrade.yaml
@@ -73,7 +73,7 @@ metadata:
 ---
 {{- if .Values.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: gatekeeper-update-namespace-label-post-upgrade
   labels:
@@ -101,7 +101,7 @@ rules:
 ---
 {{- if .Values.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: gatekeeper-update-namespace-label-post-upgrade
   labels:
@@ -113,7 +113,7 @@ metadata:
     "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
+  kind: ClusterRole
   name: gatekeeper-update-namespace-label-post-upgrade
 subjects:
   - kind: ServiceAccount