Skip to content

Conversation

@ndebuhr
Copy link
Contributor

@ndebuhr ndebuhr commented Oct 28, 2025

Description

Installing the Helm chart with the default values fails, as globalMode.enabled=false, and this misconfigures the Cluster Role Binding in templates/rbac/rbac_role_binding.yaml. This is particularly disruptive since the default values presents a sort of "getting started"/"quickstart" scenario, yet this fails in a way that requires Helm configs hacking.

Error: INSTALLATION FAILED: 1 error occurred:
        * ClusterRoleBinding.rbac.authorization.k8s.io "fdb-operator-clusterrolebinding" is invalid: subjects[0].namespace: Required value

This makes sense - Service Accounts are namespaced and so the Cluster Role Bindings subject needs to specify a namespace.

With the submitted fix, the default-values Helm installation, as well as the broader RBAC setup of the Helm chart, should be working.

Type of change

Bug fix

Testing

Manually tested with globalMode.enabled=true and globalMode.enabled=false

Documentation

I don't believe there are documentation updating requirements here.

Copy link
Member

@johscheuer johscheuer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@johscheuer johscheuer merged commit a86ed36 into FoundationDB:main Oct 29, 2025
8 checks passed
@ndebuhr ndebuhr deleted the helm-crb-fix branch October 29, 2025 19:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants