fix: adapt rolebinding to modified manager role (#647)

Signed-off-by: Florian Bacher <[email protected]>

Author: bacherfl

chart/open-feature-operator/.gitignore

@@ -5,3 +5,4 @@ templates/crds/*.yaml
 !templates/namespace.yaml
 !templates/admissionregistration.k8s.io_v1_validatingwebhookconfiguration_open-feature-operator-validating-webhook-configuration.yaml
 !templates/rbac.authorization.k8s.io_v1_clusterrole_open-feature-operator-manager-role.yaml
+!templates/rbac.authorization.k8s.io_v1_clusterrolebinding_open-feature-operator-manager-rolebinding.yaml

chart/open-feature-operator/README.md

@@ -166,7 +166,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `controllerManager.kubeRbacProxy.resources.requests.cpu`                  | Sets cpu resource requests for kube-rbac-proxy.                                                                                                            | `5m`                                         |
 | `controllerManager.kubeRbacProxy.resources.requests.memory`               | Sets memory resource requests for kube-rbac-proxy.                                                                                                         | `64Mi`                                       |
 | `controllerManager.manager.image.repository`                              | Sets the image for the operator.                                                                                                                           | `ghcr.io/open-feature/open-feature-operator` |
-| `controllerManager.manager.image.tag`                                     | Sets the version tag for the operator.                                                                                                                     | `v0.5.5`                                     |
+| `controllerManager.manager.image.tag`                                     | Sets the version tag for the operator.                                                                                                                     | `v0.5.6`                                     |
 | `controllerManager.manager.resources.limits.cpu`                          | Sets cpu resource limits for operator.                                                                                                                     | `500m`                                       |
 | `controllerManager.manager.resources.limits.memory`                       | Sets memory resource limits for operator.                                                                                                                  | `128Mi`                                      |
 | `controllerManager.manager.resources.requests.cpu`                        | Sets cpu resource requests for operator.                                                                                                                   | `10m`                                        |

chart/open-feature-operator/templates/rbac.authorization.k8s.io_v1_clusterrolebinding_open-feature-operator-manager-rolebinding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: open-feature-operator-manager-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: open-feature-operator-manager-role
+subjects:
+- kind: ServiceAccount
+  name: open-feature-operator-controller-manager
+  namespace: '{{ include "chart.namespace" . }}'

config/overlays/helm/exclude-rolebinding.yaml

@@ -0,0 +1,5 @@
+$patch: delete
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: manager-rolebinding

config/overlays/helm/kustomization.yaml

@@ -16,6 +16,7 @@ patchesStrategicMerge:
   - manager.yaml
   - exclude-validatingwebhook.yaml
   - exclude-role.yaml
+  - exclude-rolebinding.yaml
 
 configMapGenerator:
 - name: manager-config