Example manifests don't re-use existing names for RBAC resources.

To avoiding hiding potential bugs.

examples/architectures/cluster-and-ns-wide/rbac.yaml

@@ -2,7 +2,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: kube-system
-  name: varnish-ingress
+  name: varnish-ingress-system
 rules:
   - apiGroups:
       - ""
@@ -17,7 +17,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: cafe
-  name: varnish-ingress
+  name: varnish-ingress-cafe
 rules:
   - apiGroups:
       - ""
@@ -31,39 +31,39 @@ rules:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-system
   namespace: kube-system
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-system
   namespace: kube-system
 subjects:
 - kind: ServiceAccount
-  name: varnish-ingress
+  name: varnish-ingress-system
   namespace: kube-system
 roleRef:
   kind: Role
-  name: varnish-ingress
+  name: varnish-ingress-system
   apiGroup: rbac.authorization.k8s.io
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 subjects:
 - kind: ServiceAccount
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 roleRef:
   kind: Role
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   apiGroup: rbac.authorization.k8s.io

examples/architectures/cluster-and-ns-wide/varnish-coffee.yaml

@@ -13,7 +13,7 @@ spec:
       labels:
         app: varnish-ingress
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-cafe
       securityContext:
         fsGroup: 998
       containers:

examples/architectures/cluster-and-ns-wide/varnish-system.yaml

@@ -13,7 +13,7 @@ spec:
       labels:
         app: varnish-ingress
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-system
       securityContext:
         fsGroup: 998
       containers:

examples/architectures/clusterwide/rbac.yaml

@@ -2,7 +2,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: kube-system
-  name: varnish-ingress
+  name: varnish-ingress-system
 rules:
   - apiGroups:
       - ""
@@ -16,19 +16,19 @@ rules:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-system
   namespace: kube-system
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-system
   namespace: kube-system
 subjects:
 - kind: ServiceAccount
-  name: varnish-ingress
+  name: varnish-ingress-system
   namespace: kube-system
 roleRef:
   kind: Role
-  name: varnish-ingress
+  name: varnish-ingress-system
   apiGroup: rbac.authorization.k8s.io

examples/architectures/clusterwide/varnish.yaml

@@ -13,7 +13,7 @@ spec:
       labels:
         app: varnish-ingress
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-system
       securityContext:
         fsGroup: 998
       containers:

examples/architectures/multi-controller/rbac.yaml

@@ -2,7 +2,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: cafe
-  name: varnish-ingress
+  name: varnish-ingress-cafe
 rules:
   - apiGroups:
       - ""
@@ -16,19 +16,19 @@ rules:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 subjects:
 - kind: ServiceAccount
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 roleRef:
   kind: Role
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   apiGroup: rbac.authorization.k8s.io

examples/architectures/multi-controller/varnish-coffee.yaml

@@ -15,7 +15,7 @@ spec:
         app: varnish-ingress
         ingress: coffee
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-cafe
       securityContext:
         fsGroup: 998
       containers:

examples/architectures/multi-controller/varnish-tea.yaml

@@ -15,7 +15,7 @@ spec:
         app: varnish-ingress
         ingress: tea
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-cafe
       securityContext:
         fsGroup: 998
       containers:

examples/architectures/multi-varnish-ns/rbac.yaml

 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 rules:
   - apiGroups:
@@ -16,19 +16,19 @@ rules:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 subjects:
 - kind: ServiceAccount
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   namespace: cafe
 roleRef:
   kind: Role
-  name: varnish-ingress
+  name: varnish-ingress-cafe
   apiGroup: rbac.authorization.k8s.io

examples/architectures/multi-varnish-ns/varnish-coffee.yaml

@@ -15,7 +15,7 @@ spec:
         app: varnish-ingress
         ingress: coffee
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-cafe
       securityContext:
         fsGroup: 998
       containers:

examples/architectures/multi-varnish-ns/varnish-tea.yaml

@@ -15,7 +15,7 @@ spec:
         app: varnish-ingress
         ingress: tea
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: varnish-ingress-cafe
       securityContext:
         fsGroup: 998
       containers:

examples/namespace/controller.yaml

@@ -13,7 +13,7 @@ spec:
       labels:
         app: varnish-ingress-controller
     spec:
-      serviceAccountName: varnish-ingress-controller
+      serviceAccountName: viking-controller-ns-example
       containers:
       - image: varnish-ingress/controller
         imagePullPolicy: IfNotPresent

examples/namespace/rbac.yaml

@@ -2,7 +2,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: varnish-ingress
-  name: varnish-ingress-controller
+  name: viking-controller-ns-example
 rules:
   - apiGroups:
       - ""
@@ -62,7 +62,7 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: varnish-ingress
-  name: varnish-ingress
+  name: viking-service-ns-example
 rules:
   - apiGroups:
       - ""
@@ -73,29 +73,41 @@ rules:
       - list
       - watch
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: viking-controller-ns-example
+  namespace: varnish-ingress
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: viking-service-ns-example
+  namespace: varnish-ingress
+---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
   namespace: varnish-ingress
-  name: viking-controller
+  name: viking-controller-ns-example
 subjects:
 - kind: ServiceAccount
-  name: varnish-ingress-controller
+  name: viking-controller-ns-example
   namespace: varnish-ingress
 roleRef:
   kind: Role
-  name: varnish-ingress-controller
+  name: viking-controller-ns-example
   apiGroup: rbac.authorization.k8s.io
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
   namespace: varnish-ingress
-  name: viking-service
+  name: viking-service-ns-example
 subjects:
 - kind: ServiceAccount
   name: varnish-ingress
-  namespace: varnish-ingress
+  namespace: viking-service-ns-example
 roleRef:
   kind: Role
   name: varnish-ingress

examples/namespace/varnish.yaml

@@ -13,7 +13,7 @@ spec:
       labels:
         app: varnish-ingress
     spec:
-      serviceAccountName: varnish-ingress
+      serviceAccountName: viking-service-ns-example
       securityContext:
         fsGroup: 998
       containers: