Add fullname prefix for RoleBinding subjects. (#6802)

Co-authored-by: Mykhailo Bobrovskyi <[email protected]>

Author: k8s-infra-cherrypick-robot

charts/kueue/templates/visibility/role_binding.yaml

@@ -11,5 +11,5 @@ roleRef:
   name: extension-apiserver-authentication-reader
 subjects:
   - kind: ServiceAccount
-    name: kueue-controller-manager
+    name: '{{ include "kueue.fullname" . }}-controller-manager'
     namespace: '{{ .Release.Namespace }}'

config/components/visibility/kustomization.yaml

@@ -2,3 +2,6 @@ resources:
 - apiservice_v1beta1.yaml
 - role_binding.yaml
 - service.yaml
+
+transformers:
+- subject_transformer.yaml

config/components/visibility/role_binding.yaml

@@ -9,6 +9,5 @@ roleRef:
   name: extension-apiserver-authentication-reader
 subjects:
 - kind: ServiceAccount
-  name: kueue-controller-manager
-  namespace: kueue-system
-  
+  name: controller-manager
+  namespace: system

config/components/visibility/subject_transformer.yaml

@@ -0,0 +1,12 @@
+apiVersion: builtin
+kind: PrefixSuffixTransformer
+metadata:
+  name: add-prefix-to-subject-name
+prefix: kueue-
+fieldSpecs:
+- kind: RoleBinding
+  group: rbac.authorization.k8s.io
+  path: subjects/name
+- kind: RoleBinding
+  group: rbac.authorization.k8s.io
+  path: subjects/namespace

hack/processing-plan.yaml

@@ -70,6 +70,7 @@ files:
     outputDir: ./charts/kueue/templates/visibility
     excludes:
       - kustomization.yaml
+      - subject_transformer.yaml
     continueOnError: true
     operations:
       - type: APPEND
@@ -89,6 +90,9 @@ files:
       - type: UPDATE
         key: .subjects.[].namespace
         value: '"{{ .Release.Namespace }}"'
+      - type: APPEND
+        key: .subjects.[].name
+        value: '"{{ include \"kueue.fullname\" . }}-"'
     postOperations:
       - type: INSERT_TEXT
         key: .metadata