diff --git a/templates/RoleBinding-SpecificNamespaces-prometheus.yaml b/templates/RoleBinding-SpecificNamespaces-prometheus.yaml index 1c424f9..18bc4b6 100644 --- a/templates/RoleBinding-SpecificNamespaces-prometheus.yaml +++ b/templates/RoleBinding-SpecificNamespaces-prometheus.yaml @@ -1,7 +1,7 @@ --- apiVersion: rbac.authorization.k8s.io/v1 items: -{{ range .Values.nfc_monitoring.prometheus.monitor_namespaces }} +{{ range $index, $namespace := (lookup "v1" "Namespace" "" "").items }} - apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: @@ -12,7 +12,7 @@ items: app.kubernetes.io/managed-by: {{ $.Release.Service }} app.kubernetes.io/version: {{ $.Chart.Version }} name: prometheus-{{ $.Release.Name }} - namespace: {{ . | quote }} + namespace: {{ $namespace.metadata.name | quote }} roleRef: apiGroup: rbac.authorization.k8s.io kind: Role diff --git a/values.yaml b/values.yaml index 17ef995..fac5850 100644 --- a/values.yaml +++ b/values.yaml @@ -308,7 +308,7 @@ nfc_monitoring: # Deploy a generate policy for kyverno to create Role and RoleBindings # for the prometheus service account so it can monitor # new/existing namespaces - kyverno_role_policy: true + kyverno_role_policy: false storage: volumeClaimTemplate: