security issues due to fixed ns in crb (#14)

testd with OpenShift Server Version: 4.12.0 Kubernetes Version: v1.25.4
Dopingus · Jan 29, 2023 · 06115e7 · 06115e7
1 parent 569e559
commit 06115e7
Showing 1 changed file with 1 addition and 6 deletions.
diff --git a/deploy/dynu-webhook/templates/rbac.yaml b/deploy/dynu-webhook/templates/rbac.yaml
@@ -104,7 +104,7 @@ subjects:
   - apiGroup: ""
     kind: ServiceAccount
     name: {{ .Values.certManager.serviceAccountName }}
-    namespace: {{ .Values.certManager.namespace }}
+    namespace: {{ .Release.Namespace }}
 
 ---
 # Grant cert-manager permission to read secrets from cert-manager ns (i.e. to read the api key for dynu)
@@ -140,11 +140,6 @@ subjects:
     kind: ServiceAccount
     name: {{ include "dynu-webhook.fullname" . }}
     namespace: {{ .Release.Namespace }}
-  - apiGroup: ""
-    kind: ServiceAccount
-    name: {{ .Values.certManager.serviceAccountName }}
-    namespace: {{ .Values.certManager.namespace }}
-
 
 ---