fix: Fix access to PDNS API key secrets in other namespaces

zachomedia · Dec 21, 2021 · 34e6084 · 34e6084
1 parent 2b018ee
commit 34e6084
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/deploy/cert-manager-webhook-pdns/Chart.yaml b/deploy/cert-manager-webhook-pdns/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: cert-manager-webhook-pdns
-version: 1.0.0
+version: 1.1.0
 description: Cert Manager Webhook for PowerDNS.
 type: application
 home: https://github.com/zachomedia/cert-manager-webhook-pdns

diff --git a/deploy/cert-manager-webhook-pdns/templates/rbac.yaml b/deploy/cert-manager-webhook-pdns/templates/rbac.yaml
@@ -12,7 +12,7 @@ metadata:
 # apiserver's requestheader-ca-certificate.
 # This ConfigMap is automatically created by the Kubernetes apiserver.
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: {{ include "cert-manager-webhook-pdns.fullname" . }}
   labels:
@@ -22,7 +22,7 @@ metadata:
     heritage: {{ .Release.Service }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
+  kind: ClusterRole
   name: {{ include "cert-manager-webhook-pdns.fullname" . }}
 subjects:
   - apiGroup: ""
@@ -32,7 +32,7 @@ subjects:
 ---
 # Grant cert-manager permission to validate using our apiserver
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: {{ include "cert-manager-webhook-pdns.fullname" . }}
   labels: