Skip to content

Commit 56dbecf

Browse files
(helm/v2-alpha): Fix cross-namespace RBAC file naming and templating
Fixes handling of namespace-scoped Roles and RoleBindings in cross-namespace scenarios (e.g., for leader election, cross-namespace permissions). Changes: 1. File naming: Append namespace suffix only when RBAC namespace differs from manager namespace to prevent file collisions - Manager namespace: leader-election-role.yaml (no suffix) - Cross-namespace: manager-role-infrastructure.yaml (suffix added) 2. Namespace templating: Manager namespace references replaced with {{ .Release.Namespace }}, cross-namespace metadata preserved as-is - Role in manager NS: namespace: {{ .Release.Namespace }} - Role in other NS: namespace: infrastructure (unchanged) - Subjects always: namespace: {{ .Release.Namespace }} 3. Manager namespace detection: Extract from Deployment resource instead of assuming <prefix>-system pattern Result: Cross-namespace RBAC resources now generate correctly with explicit namespaces preserved and unique filenames, while manager-namespace resources are properly templated for Helm release flexibility." Assisted-by: Cursor
1 parent 0883a84 commit 56dbecf

File tree

6 files changed

+947
-14
lines changed

6 files changed

+947
-14
lines changed

0 commit comments

Comments
 (0)