Use cert-manager-app as service account name for Cert Manager (chan… (

#269) * Use `cert-manager-app` as service account name for Cert Manager (changed in recent version of cert-manager app). * Use `cert-manager-app` as service account name for Cert Manager (changed in recent version of cert-manager app). * bogus change to try and re-do the docker build
giantswarm · Feb 28, 2024 · 17481d2 · 17481d2
1 parent b80dbf8
commit 17481d2
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Use `cert-manager-app` as service account name for Cert Manager (changed in recent version of cert-manager-app).
+
 ## [0.15.0] - 2024-01-10
 
 ### Changed

diff --git a/controllers/common_test.go b/controllers/common_test.go
@@ -22,7 +22,7 @@ var certManagerRoleInfo = RoleInfo{
       "Action": "sts:AssumeRoleWithWebIdentity",
       "Condition": {
         "StringEquals": {
-          "irsa.test.gaws.gigantic.io:sub": "system:serviceaccount:kube-system:cert-manager-controller"
+          "irsa.test.gaws.gigantic.io:sub": "system:serviceaccount:kube-system:cert-manager-app"
         }
       }
     }

diff --git a/pkg/iam/iam.go b/pkg/iam/iam.go
@@ -656,7 +656,7 @@ func policyName(role string, clusterID string) string {
 
 func getServiceAccount(role string) (string, error) {
 	if role == CertManagerRole {
-		return "cert-manager-controller", nil
+		return "cert-manager-app", nil
 	} else if role == IRSARole {
 		return "external-dns", nil
 	} else if role == Route53Role {