Use correct name if singleNamespace flag is set

charts/argo/templates/server-cluster-role.yaml

@@ -2,11 +2,13 @@
 apiVersion: rbac.authorization.k8s.io/v1
 {{- if .Values.singleNamespace }}
 kind: Role
+metadata:
+  name: {{ .Release.Name }}-{{ .Values.server.name }}-role
 {{ else }}
 kind: ClusterRole
-{{- end }}
 metadata:
   name: {{ .Release.Name }}-{{ .Values.server.name }}-cluster-role
+{{- end }}
 rules:
 - apiGroups:
   - ""

charts/argo/templates/server-crb.yaml

@@ -2,19 +2,22 @@
 apiVersion: rbac.authorization.k8s.io/v1
 {{- if .Values.singleNamespace }}
 kind: RoleBinding
+metadata:
+  name: {{ .Release.Name }}-{{ .Values.server.name}}-rb
 {{ else }}
 kind: ClusterRoleBinding
-{{- end }}
 metadata:
   name: {{ .Release.Name }}-{{ .Values.server.name}}-crb
+{{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   {{- if .Values.singleNamespace }}
   kind: Role
+  name: {{ .Release.Name }}-{{ .Values.server.name}}-role
   {{ else }}
   kind: ClusterRole
-  {{- end }}
   name: {{ .Release.Name }}-{{ .Values.server.name}}-cluster-role
+  {{- end }}
 subjects:
 - kind: ServiceAccount
   name: {{ .Values.server.serviceAccount }}

charts/argo/templates/workflow-aggregate-roles.yaml

@@ -1,10 +1,6 @@
 {{- if .Values.createAggregateRoles }}
 apiVersion: rbac.authorization.k8s.io/v1
-{{- if .Values.singleNamespace }}
-kind: Role
-{{ else }}
 kind: ClusterRole
-{{- end }}
 metadata:
   annotations:
     helm.sh/hook: pre-install
@@ -28,11 +24,7 @@ rules:
   - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-  {{- if .Values.singleNamespace }}
-kind: Role
-  {{ else }}
 kind: ClusterRole
-  {{- end }}
 metadata:
   annotations:
     helm.sh/hook: pre-install
@@ -61,11 +53,7 @@ rules:
   - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-  {{- if .Values.singleNamespace }}
-kind: Role
-  {{ else }}
 kind: ClusterRole
-  {{- end }}
 metadata:
   annotations:
     helm.sh/hook: pre-install

charts/argo/templates/workflow-controller-clusterrole.yaml

@@ -1,11 +1,13 @@
 apiVersion: rbac.authorization.k8s.io/v1
 {{- if .Values.singleNamespace }}
 kind: Role
+metadata:
+  name: {{ .Release.Name }}-{{ .Values.controller.name }}-role
 {{ else }}
 kind: ClusterRole
-  {{- end }}
 metadata:
   name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-role
+{{- end }}
 rules:
 - apiGroups:
   - ""

charts/argo/templates/workflow-controller-crb.yaml

@@ -10,10 +10,11 @@ roleRef:
   apiGroup: rbac.authorization.k8s.io
   {{- if .Values.singleNamespace }}
   kind: Role
+  name: {{ .Release.Name }}-{{ .Values.controller.name }}-role
   {{ else }}
   kind: ClusterRole
-  {{- end }}
   name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-role
+  {{- end }}
 subjects:
   - kind: ServiceAccount
     name: {{ .Values.controller.serviceAccount }}