fixed cluster role bindings for multi namespace deployments

Author: sionsmith

kustomize/base/operator/clusterrole.yaml

@@ -1,7 +1,7 @@
 ---
 # Source: confluent-for-kubernetes/templates/clusterrole.yaml
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   labels:
     app: confluent-for-kubernetes
@@ -11,7 +11,6 @@ metadata:
     app.kubernetes.io/component: "confluent-operator"
     helm.sh/chart: confluent-for-kubernetes-0.174.13
   name: confluent-operator
-  namespace: default
 rules:
 - apiGroups:
   - cluster.confluent.com

kustomize/base/operator/clusterrolebinding.yaml

@@ -1,6 +1,4 @@
----
-# Source: confluent-for-kubernetes/templates/clusterrolebinding.yaml
-kind: RoleBinding
+kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   labels:
@@ -11,12 +9,11 @@ metadata:
     app.kubernetes.io/component: "confluent-operator"
     helm.sh/chart: confluent-for-kubernetes-0.174.13
   name: confluent-operator
-  namespace: default
 subjects:
 - kind: ServiceAccount
   name: confluent-for-kubernetes
-  namespace: default
+  namespace: sandbox
 roleRef:
-  kind: Role
+  kind: ClusterRole
   name: confluent-operator
   apiGroup: rbac.authorization.k8s.io

kustomize/base/operator/deployment.yaml

@@ -12,7 +12,6 @@ metadata:
     helm.sh/chart: confluent-for-kubernetes-0.174.13
     version: 0.174.13
   name: confluent-operator
-  namespace:  default
 spec:
   replicas: 1
   selector:

kustomize/base/operator/service.yaml

@@ -11,7 +11,6 @@ metadata:
     app.kubernetes.io/component: "confluent-operator"
     helm.sh/chart: confluent-for-kubernetes-0.174.13
   name: confluent-operator
-  namespace:  default
 spec:
   ports:
     - name: http-metric

kustomize/base/operator/serviceaccount.yaml

@@ -13,4 +13,3 @@ metadata:
     app.kubernetes.io/component: "confluent-operator"
     helm.sh/chart: confluent-for-kubernetes-0.174.13
   name: confluent-for-kubernetes
-  namespace: default