Merge pull request #783 from fluxcd/rbac-fix

RBAC Fix: Add SA namespace to cluster role bindings

manifests/rbac/controller.yaml

@@ -70,13 +70,19 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: kustomize-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: helm-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: source-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: notification-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: image-reflector-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: image-automation-controller
+    namespace: flux-system

manifests/rbac/reconciler.yaml

@@ -9,5 +9,7 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: kustomize-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: helm-controller
+    namespace: flux-system

pkg/manifestgen/install/templates.go

@@ -117,6 +117,7 @@ images:
 var kustomizationRolesTmpl = `---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: {{.Namespace}}
 resources:
   - rbac.yaml
 nameSuffix: -{{.Namespace}}