vikingowl d8e17ee22e fix(deploy): use tenant SA instead of custom RBAC ...

ITSH Cloud's multi-tenant model forbids tenants from creating Roles or
RoleBindings, so the custom least-privilege Role we shipped can't be
applied. The pre-provisioned 'tenant-2' ServiceAccount in the tenant
namespace already carries the necessary secret-patch permission, so we
just point the CronJob at it.

Also fixes the kustomize commonLabels -> labels deprecation.

2026-05-18 17:51:20 +02:00

..

k8s

fix(deploy): use tenant SA instead of custom RBAC

2026-05-18 17:51:20 +02:00