Installer: introduce namespacePrefix, fix certificates, split matrix installation using pre-install hook
diff --git a/charts/certificate-issuer/templates/gandi-webhook-secret-reader.yaml b/charts/certificate-issuer/templates/gandi-webhook-secret-reader.yaml
index b3d1491..88cf405 100644
--- a/charts/certificate-issuer/templates/gandi-webhook-secret-reader.yaml
+++ b/charts/certificate-issuer/templates/gandi-webhook-secret-reader.yaml
@@ -1,7 +1,7 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
- name: cert-manager-gandi-webhook-secret-reader
+ name: {{ .Release.Namespace }}-cert-manager-gandi-webhook-secret-reader # TODO(giolekva): make namespace part configurable
namespace: {{ .Release.Namespace }}
rules:
- apiGroups:
@@ -14,12 +14,12 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: cert-manager-gandi-webhook-secret-reader
+ name: {{ .Release.Namespace }}-cert-manager-gandi-webhook-secret-reader
namespace: {{ .Release.Namespace }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
- name: cert-manager-gandi-webhook-secret-reader
+ name: {{ .Release.Namespace }}-cert-manager-gandi-webhook-secret-reader
subjects:
- kind: ServiceAccount
name: {{ .Values.certManager.gandiWebhookSecretReader }}