Failed to create subnamespace due to service "webhook-service" not found

[pddg]

Describe the bug
A setup where CRD is installed separately and accurate itself is managed by helm is described in the documentation.
https://github.com/cybozu-go/accurate/tree/v1.3.0/charts/accurate#installing-customresourcedefinitions-optional

However, setting up in this way fails with the following error.

❯ kubectl accurate sub create sub root
Error: failed to create a SubNamespace: conversion webhook for accurate.cybozu.com/v1, Kind=SubNamespace failed: Post "https://webhook-service.system.svc:443/convert?timeout=30s": service "webhook-service" not found

Environments

• Version: v1.3.0
• OS: Ubuntu 24.04

To Reproduce
Steps to reproduce the behavior:

1. Create kubernetes cluster
   1. kind create cluster --name accurate
2. Install cert-manager
   1. curl -fsL https://github.com/cert-manager/cert-manager/releases/download/v1.15.0/cert-manager.yaml | kubectl apply -f -
3. Install CRD of accurate
   1. kustomize build https://github.com/cybozu-go/accurate/config/crd | kubectl apply -f -
4. Install accurate by helm with installCRDs=false
   1. helm repo add accurate https://cybozu-go.github.io/accurate/
   2. helm repo update
   3. helm install --create-namespace --namespace accurate --set installCRDs=false accurate accurate/accurate
5. create sub namespace

Expected behavior
accurate works and sub namespaces are created.

Additional context
This occurs because accurate uses helm templates to make some of the CRDs variable and the CRDs installed through this procedure are different from the CRDs installed through helm.

accurate/charts/accurate/templates/generated/crds.yaml

Lines 4 to 24 in e09d427

	metadata:
	annotations:
	cert-manager.io/inject-ca-from: '{{ .Release.Namespace }}/{{ template "accurate.fullname" . }}-serving-cert'
	controller-gen.kubebuilder.io/version: v0.15.0
	labels:
	app.kubernetes.io/managed-by: '{{ .Release.Service }}'
	app.kubernetes.io/name: '{{ include "accurate.name" . }}'
	app.kubernetes.io/version: '{{ .Chart.AppVersion }}'
	helm.sh/chart: '{{ include "accurate.chart" . }}'
	name: subnamespaces.accurate.cybozu.com
	spec:
	conversion:
	strategy: Webhook
	webhook:
	clientConfig:
	service:
	name: '{{ template "accurate.fullname" . }}-webhook-service'
	namespace: '{{ .Release.Namespace }}'
	path: /convert
	conversionReviewVersions:
	- v1

I want the documentation to say what changes should be made to the CRD.

[erikgb]

I agree something isn't right here. But the conversion webhook configuration in the CRD needs to know which namespace the webhook is running in, so I don't expect an easy/good fix to be available here.