The fix in #1752 to allow Kafka CRs having the same name in different namespaces does not account for namespace in the configuration of a role.
For example, if my-kafka were to be configured in namespace1 and namespace2, the user has no way to constrain access to one or the other.
spec:
security:
roles:
- name: foo-role
rules:
- privileges:
- ALL
resources:
- kafkas
resourceNames:
- my-kafka