fix: NVSHAS-9662 fix inconsistent role bindings

Remove a few role bindings when internal.autoGenerateCert is disabled
neuvector · Jan 7, 2025 · d5e8db3 · d5e8db3
1 parent 563a95d
commit d5e8db3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/charts/core/templates/rolebinding-least.yaml b/charts/core/templates/rolebinding-least.yaml
@@ -98,7 +98,6 @@ subjects:
 userNames:
 - system:serviceaccount:{{ .Release.Namespace }}:controller
 {{- end }}
-{{- end }}
 ---
 {{- if $oc3 }}
 apiVersion: authorization.openshift.io/v1
@@ -128,6 +127,7 @@ subjects:
 userNames:
 - system:serviceaccount:{{ .Release.Namespace }}:cert-upgrader
 {{- end }}
+{{- end }}
 ---
 {{- if $oc3 }}
 apiVersion: authorization.openshift.io/v1

diff --git a/charts/core/templates/rolebinding.yaml b/charts/core/templates/rolebinding.yaml
@@ -110,7 +110,6 @@ subjects:
 - kind: ServiceAccount
   name: {{ .Values.serviceAccount }}
   namespace: {{ .Release.Namespace }}
-{{- end }}
 ---
 {{- if $oc3 }}
 apiVersion: authorization.openshift.io/v1
@@ -170,4 +169,5 @@ userNames:
 - system:serviceaccount:{{ .Release.Namespace }}:cert-upgrader
 {{- end }}
 {{- end }}
+{{- end }}