C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

cert-manager: Fix incorrect leader election namespace lead to insufficient permission (#8433)

Browse source
This commit is contained in:
rtsp 2022-01-17 17:37:29 +07:00 committed by GitHub
parent 418f12f62a
commit e791089466
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2
View file

@ -630,7 +630,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: Role kind: Role
metadata: metadata:
name: cert-manager-cainjector:leaderelection name: cert-manager-cainjector:leaderelection
namespace: {{ cert_manager_namespace }} namespace: {{ cert_manager_leader_election_namespace }}
labels: labels:
app: cainjector app: cainjector
app.kubernetes.io/name: cainjector app.kubernetes.io/name: cainjector
@ -664,7 +664,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: Role kind: Role
metadata: metadata:
name: cert-manager:leaderelection name: cert-manager:leaderelection
namespace: {{ cert_manager_namespace }} namespace: {{ cert_manager_leader_election_namespace }}
labels: labels:
app: cert-manager app: cert-manager
app.kubernetes.io/name: cert-manager app.kubernetes.io/name: cert-manager
@ -719,7 +719,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
name: cert-manager-cainjector:leaderelection name: cert-manager-cainjector:leaderelection
namespace: {{ cert_manager_namespace }} namespace: {{ cert_manager_leader_election_namespace }}
labels: labels:
app: cainjector app: cainjector
app.kubernetes.io/name: cainjector app.kubernetes.io/name: cainjector
@ -742,7 +742,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
metadata: metadata:
name: cert-manager:leaderelection name: cert-manager:leaderelection
namespace: {{ cert_manager_namespace }} namespace: {{ cert_manager_leader_election_namespace }}
labels: labels:
app: cert-manager app: cert-manager
app.kubernetes.io/name: cert-manager app.kubernetes.io/name: cert-manager