Mismatch between Roles and RoleAssignments when setting internal.autoGenerateCert: false

[uivraeus]

In core/templates/role.yaml, there is a conditional if .Values.internal.autoGenerateCert around the roles neuvector-binding-lease, neuvector-binding-job-creation and neuvector-binding-cert-upgrader. So, if this boolean is false, then none of those three Roles are included.

The corresponding RoleBindings in core/templates/rolebinding.yaml also includes the conditional if .Values.internal.autoGenerateCert, but only for the neuvector-binding-lease.

Therefore, two RoleBindings (neuvector-binding-job-creation and neuvector-binding-cert-upgrader) are created with references to non-existing Roles.

[matake01]

I experienced following error during startup and seems to be related:

error=Cannot find Kubernetes role "neuvector-binding-secret-controller"(kubernetes api: Failure 404 roles.rbac.authorization.k8s.io "neuvector-binding-secret-controller" not found). name=neuvector-binding-secret-controller type=role

It was solved with the suggested solution ☝️