Ошибка selectel.acme.selectel.ru is forbidden

[healthy4u-devops]

Версия: 1.4.0
Переменные:

certManager:
namespace: essentials
serviceAccountName: essentials

Лог:

E0724 05:11:02.284157 1 controller.go:157] "re-queuing item due to error processing" err="selectel.acme.selectel.ru is forbidden: User "system:serviceaccount:essentials:cert-manager" cannot create resource "selectel" in API group "acme.selectel.ru" at the cluster scope" logger="cert-manager.controller"

[the-avant-it]

Исправлено добавлением этих ресурсов:

---  
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: cert-manager-selectel
rules:
- apiGroups: ["acme.selectel.ru"]
  resources: ["selectel"]
  verbs: ["create", "get", "list", "watch", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: cert-manager-selectel
subjects:
- kind: ServiceAccount
  name: cert-manager
  namespace: essentials
roleRef:
  kind: ClusterRole
  name: cert-manager-selectel
  apiGroup: rbac.authorization.k8s.io