Merge pull request #783 from fluxcd/rbac-fix

RBAC Fix: Add SA namespace to cluster role bindings

manifests/rbac/controller.yaml

@@ -70,13 +70,19 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: kustomize-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: helm-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: source-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: notification-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: image-reflector-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: image-automation-controller
+    namespace: flux-system

manifests/rbac/reconciler.yaml

@@ -9,5 +9,7 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: kustomize-controller
+    namespace: flux-system
   - kind: ServiceAccount
     name: helm-controller
+    namespace: flux-system

mkdocs.yml

@@ -83,11 +83,11 @@ nav:
         - Receiver CRD: components/notification/receiver.md
         - Notification API Reference: components/notification/api.md
     - Image Automation Controllers:
-        - Overview: components/images/controller.md
-        - ImageRepository CRD: components/images/imagerepositories.md
-        - ImagePolicy CRD: docs/components/image/imagepolicies.md
-        - ImageUpdateAutomation CRD: docs/components/image/imageupdateautomations.md
-        - Automation API Reference: docs/components/image/automation-api.md
+        - Overview: components/image/controller.md
+        - ImageRepository CRD: components/image/imagerepositories.md
+        - ImagePolicy CRD: components/image/imagepolicies.md
+        - ImageUpdateAutomation CRD: components/image/imageupdateautomations.md
+        - Automation API Reference: components/image/automation-api.md
   - Flux CLI:
     - Overview: cmd/flux.md
     - Bootstrap: cmd/flux_bootstrap.md

pkg/manifestgen/install/templates.go

@@ -117,6 +117,7 @@ images:
 var kustomizationRolesTmpl = `---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: {{.Namespace}}
 resources:
   - rbac.yaml
 nameSuffix: -{{.Namespace}}