From 45076a6a1f44f800a02e46a735db95751c50dce7 Mon Sep 17 00:00:00 2001 From: Brandon Dimcheff <bdimchef-git@wieldim.com> Date: Wed, 25 Apr 2018 21:48:21 -0400 Subject: [PATCH] kube-prometheus: fix addon-resizer role binding The addon resizer was referring to an incorrect role binding and was unable to access the API. This changes the rolebinding name to refer to the correctly defined rolebinding. --- .../kube-state-metrics-role-binding.libsonnet | 2 +- .../kube-state-metrics/kube-state-metrics-role-binding.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/jsonnet/kube-state-metrics/kube-state-metrics-role-binding.libsonnet b/jsonnet/kube-state-metrics/kube-state-metrics-role-binding.libsonnet index bd9b03ae..02a43b7a 100644 --- a/jsonnet/kube-state-metrics/kube-state-metrics-role-binding.libsonnet +++ b/jsonnet/kube-state-metrics/kube-state-metrics-role-binding.libsonnet @@ -7,7 +7,7 @@ local roleBinding = k.rbac.v1.roleBinding; roleBinding.mixin.metadata.withName("kube-state-metrics") + roleBinding.mixin.metadata.withNamespace(namespace) + roleBinding.mixin.roleRef.withApiGroup("rbac.authorization.k8s.io") + - roleBinding.mixin.roleRef.withName("kube-state-metrics-addon-resizer") + + roleBinding.mixin.roleRef.withName("kube-state-metrics") + roleBinding.mixin.roleRef.mixinInstance({kind: "Role"}) + roleBinding.withSubjects([{kind: "ServiceAccount", name: "kube-state-metrics"}]) } diff --git a/manifests/kube-state-metrics/kube-state-metrics-role-binding.yaml b/manifests/kube-state-metrics/kube-state-metrics-role-binding.yaml index dcad8055..9c61143c 100644 --- a/manifests/kube-state-metrics/kube-state-metrics-role-binding.yaml +++ b/manifests/kube-state-metrics/kube-state-metrics-role-binding.yaml @@ -6,7 +6,7 @@ metadata: roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: kube-state-metrics-addon-resizer + name: kube-state-metrics subjects: - kind: ServiceAccount name: kube-state-metrics -- GitLab