From 1e72e8b27542a2e4bc70d78f009e6df5504f7564 Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Sat, 17 May 2025 18:50:12 -0500
Subject: [PATCH] change roles

---
 .../templates/cluster-role-binding.yaml                   | 2 +-
 .../templates/cluster-role.yaml                           | 8 ++++----
 .../templates/role-binding.yaml                           | 6 +++---
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role-binding.yaml b/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role-binding.yaml
index 14fe3e021..f2c354a5b 100644
--- a/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role-binding.yaml
+++ b/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role-binding.yaml
@@ -10,7 +10,7 @@ metadata:
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: "certificates:{{ .Release.Name }}"
+  name: "certificates-{{ .Release.Name }}"
 subjects:
   - kind: ServiceAccount
     name: kubelet-serving-cert-approver
diff --git a/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role.yaml b/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role.yaml
index 96550a1e7..06ee749b7 100644
--- a/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role.yaml
+++ b/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/cluster-role.yaml
@@ -1,10 +1,10 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: "certificates:{{ .Release.Name }}"
+  name: "certificates-{{ .Release.Name }}"
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: "certificates:{{ .Release.Name }}"
+    app.kubernetes.io/name: "certificates-{{ .Release.Name }}"
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 rules:
@@ -41,10 +41,10 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: "events:{{ .Release.Name }}"
+  name: "events-{{ .Release.Name }}"
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: "events:{{ .Release.Name }}"
+    app.kubernetes.io/name: "events-{{ .Release.Name }}"
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 rules:
diff --git a/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/role-binding.yaml b/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/role-binding.yaml
index 70401b6d7..cc40acbe8 100644
--- a/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/role-binding.yaml
+++ b/clusters/cl01tl/standalone/kubelet-serving-cert-approver/templates/role-binding.yaml
@@ -1,16 +1,16 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: "events:{{ .Release.Name }}"
+  name: "events-{{ .Release.Name }}"
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: "events:{{ .Release.Name }}"
+    app.kubernetes.io/name: "events-{{ .Release.Name }}"
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: "events:{{ .Release.Name }}"
+  name: "events-{{ .Release.Name }}"
 subjects:
   - kind: ServiceAccount
     name: kubelet-serving-cert-approver