Merge pull request #170 from replicatedhq/cluster-role-idempotent

Cluster Roles
replicatedhq · Nov 28, 2019 · 9282be4 · 9282be4
2 parents 0a41eb5 + 3db2bcd
commit 9282be4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/kotsadm/operator.go b/pkg/kotsadm/operator.go
@@ -71,7 +71,7 @@ func ensureOperatorRBAC(namespace string, clientset *kubernetes.Clientset) error
 }
 
 func ensureOperatorRole(namespace string, clientset *kubernetes.Clientset) error {
-	_, err := clientset.RbacV1().Roles(namespace).Get("kotsadm-operator-role", metav1.GetOptions{})
+	_, err := clientset.RbacV1().ClusterRoles().Get("kotsadm-operator-role", metav1.GetOptions{})
 	if err != nil {
 		if !kuberneteserrors.IsNotFound(err) {
 			return errors.Wrap(err, "failed to get role")
@@ -87,7 +87,7 @@ func ensureOperatorRole(namespace string, clientset *kubernetes.Clientset) error
 }
 
 func ensureOperatorRoleBinding(namespace string, clientset *kubernetes.Clientset) error {
-	_, err := clientset.RbacV1().RoleBindings(namespace).Get("kotsadm-operator-rolebinding", metav1.GetOptions{})
+	_, err := clientset.RbacV1().ClusterRoleBindings().Get("kotsadm-operator-rolebinding", metav1.GetOptions{})
 	if err != nil {
 		if !kuberneteserrors.IsNotFound(err) {
 			return errors.Wrap(err, "failed to get rolebinding")