ricoberger/vault-secrets-operator 1.8.2

Version 1.8.2 / 2020-10-28

on GitHub

Allow Namespaced Deployment (#51 by @bartmeuris)

The RBAC options of the Helm chart were adjusted as follows:

• rbac.createclusterrole toggles the creation of the (global) cluster role. This is only necessary once, and only enable this on an internal "management" namespace, where all helm deploys are owner of all CRD's and cluster roles. Note that this will only create the cluster role if rbac.create is also set.
• rbac.namespaced: this does a few things:
  • a RoleBinding is created instead of a ClusterRoleBinding
  • The WATCH_NAMESPACE env var is overridden to be the .Release.Namespace, so only this namespace (where the operator has permissions) is watched.

Thanks to @bartmeuris for his PR #51.