Fix KEDA crashes when using cert-manager certificates and restricted …

…secret access Allow KEDA operator to get, list and watch secrets in its own namespace when restricted mode and certmanager are enabled. Signed-off-by: Guillaume Jacquet <[email protected]>
kedacore · Sep 8, 2023 · 84a116d · 84a116d
1 parent e08ac77
commit 84a116d
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 5 deletions.
diff --git a/keda/Chart.yaml b/keda/Chart.yaml
@@ -8,7 +8,7 @@ kubeVersion: ">=v1.23.0-0"
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 2.11.2
+version: 2.11.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.

diff --git a/keda/templates/manager/role.yaml b/keda/templates/manager/role.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.certificates.autoGenerated ( not .Values.certificates.certManager.enabled ) }}
+{{- if or .Values.certificates.autoGenerated .Values.certificates.certManager.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -17,11 +17,13 @@ rules:
   resources:
   - secrets
   verbs:
+  {{- if not .Values.certificates.certManager.enabled }}
   - create
   - delete
-  - get
-  - list
   - patch
   - update
+  {{- end }}
   - watch
+  - get
+  - list
 {{- end -}}
diff --git a/keda/templates/manager/rolebinding.yaml b/keda/templates/manager/rolebinding.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.certificates.autoGenerated ( not .Values.certificates.certManager.enabled ) }}
+{{- if or .Values.certificates.autoGenerated .Values.certificates.certManager.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata: