| You did not perform the expected test here. What is expected
- Install the operator
- Then check if is possible to create/apply ONLY the MSS and or DB in another namespace.
- You should not able to create the Service and/or its database in other namespace and it is what should be checked here.
Following the information. You will see the errors regards the rules (RCBA) because of the cluster rule is specific for the mobile-security-service namespace. ( # Replace this with the namespace the operator is deployed in. namespace: mobile-security-service )
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: mobile-security-service-operator
subjects:
- kind: ServiceAccount
name: mobile-security-service-operator
# Replace this with the namespace the operator is deployed in.
namespace: mobile-security-service
roleRef:
kind: ClusterRole
name: mobile-security-service-operator
apiGroup: rbac.authorization.k8s.io
|