Skip to content
This repository was archived by the owner on Feb 28, 2023. It is now read-only.

Commit 24b4fdb

Browse files
committed
Use prefixed name for RBAC objects for cluster-scoped configs
1 parent 9594909 commit 24b4fdb

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

lib/resource-locker.libjsonnet

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -118,8 +118,8 @@ local rl_obj_name(objdata) =
118118

119119
local rbac_objs(objdata, verbs=[ 'create', 'get', 'update', 'patch' ]) =
120120
local dest_ns = objdata.namespace;
121-
// Some objects like ClusterRoleBinding can contain colons.
122-
local name = replaceColon(objdata.name);
121+
// Use full rl_obj_name to avoid collisions for cluster-scoped configs
122+
local name = rl_obj_name(objdata);
123123
// Create sa if not provided
124124
local saname = name + '-manager';
125125
local serviceaccount = kube.ServiceAccount(saname) {

0 commit comments

Comments
 (0)