From 9b7979ff0389e89cc6bc39a728a7b1e32b9d3e69 Mon Sep 17 00:00:00 2001
From: Matteo Ruina <matteo.ruina@gmail.com>
Date: Tue, 31 May 2022 15:00:17 +0200
Subject: [PATCH] Fix rbac roles for metrics

---
 charts/kms-issuer/templates/rbac.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/charts/kms-issuer/templates/rbac.yaml b/charts/kms-issuer/templates/rbac.yaml
index 8aa9033..746f565 100644
--- a/charts/kms-issuer/templates/rbac.yaml
+++ b/charts/kms-issuer/templates/rbac.yaml
@@ -160,6 +160,7 @@ subjects:
 - kind: ServiceAccount
   name: cert-manager
   namespace: cert-manager
+{{- if .Values.enableMetricsRbacProxy }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -171,7 +172,6 @@ rules:
   verbs:
   - get
 ---
-{{- if .Values.enableMetricsRbacProxy }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata: