From 3f2e488fc6814d5150c17d806c6417c53b7ff996 Mon Sep 17 00:00:00 2001
From: Rokibul Hasan <mdrokibulhasan18@gmail.com>
Date: Tue, 11 Jun 2024 07:53:59 +0600
Subject: [PATCH 1/2] Update cluster-role (#111)

Signed-off-by: Rokibul Hasan <mdrokibulhasan@appscode.com>
---
 charts/managed-serviceaccount/templates/clusterrole.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/charts/managed-serviceaccount/templates/clusterrole.yaml b/charts/managed-serviceaccount/templates/clusterrole.yaml
index 6abe7ec..0aa73b8 100644
--- a/charts/managed-serviceaccount/templates/clusterrole.yaml
+++ b/charts/managed-serviceaccount/templates/clusterrole.yaml
@@ -20,6 +20,7 @@ rules:
       - get
       - list
       - watch
+      - patch
   - apiGroups:
       - addon.open-cluster-management.io
     resources:

From 36dc2b2cf80722d322b6e60688f77c762ffcf34f Mon Sep 17 00:00:00 2001
From: Jian Zhu <jiazhu@redhat.com>
Date: Wed, 19 Jun 2024 21:51:18 +0800
Subject: [PATCH 2/2] Add install namespace suffix to clusterrolebinding name
 (#113)

Signed-off-by: zhujian <jiazhu@redhat.com>
---
 charts/managed-serviceaccount/templates/addontemplate.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/charts/managed-serviceaccount/templates/addontemplate.yaml b/charts/managed-serviceaccount/templates/addontemplate.yaml
index 9265033..2896c26 100644
--- a/charts/managed-serviceaccount/templates/addontemplate.yaml
+++ b/charts/managed-serviceaccount/templates/addontemplate.yaml
@@ -32,7 +32,7 @@ spec:
       - apiVersion: rbac.authorization.k8s.io/v1
         kind: ClusterRoleBinding
         metadata:
-          name: open-cluster-management:managed-serviceaccount:addon-agent
+          name: open-cluster-management:managed-serviceaccount:addon-agent{{ `{{INSTALL_NAMESPACE}}` }}
         roleRef:
           apiGroup: rbac.authorization.k8s.io
           kind: ClusterRole