Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

akv2k8s: RoleBinding is broken if custom service account name is used #121

Open
waza-ari opened this issue Mar 4, 2024 · 2 comments
Open

Comments

@waza-ari
Copy link

waza-ari commented Mar 4, 2024

When overriding the service account name, it is being used in the service account template:

name: {{ template "controller.serviceAccountName" . }}

It is however not used when creating a role binding, so effectively the SA is missing required permissions:

subjects:
- kind: ServiceAccount
name: {{ template "akv2k8s.controller.fullname" . }}
namespace: {{ .Release.Namespace }}

@waza-ari waza-ari changed the title RoleBinding is broken if custom service account name is used akv2k8s: RoleBinding is broken if custom service account name is used Mar 4, 2024
@v1ferrarij
Copy link

@waza-ari Did you find any way to get around this?

I am going to have to create the RBAC via kubectl which is annoying as they have different lifecycles!

@waza-ari
Copy link
Author

waza-ari commented Sep 9, 2024

@v1ferrarij , sorry no, I didn't. The project doesn't seem maintained anymore, I basically gave up on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants