Fix namespace in rolebindings

Signed-off-by: Andrea Frittoli <andrea.frittoli@uk.ibm.com>

Author: afrittoli

prow/control-plane/extra.yaml

@@ -24,6 +24,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: prow-config-bot
+  namespace: default
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

prow/control-plane/prow.yaml

@@ -33,7 +33,7 @@ spec:
       labels:
         app: hook
     spec:
-      serviceAccountName: "hook"
+      serviceAccountName: hook
       terminationGracePeriodSeconds: 180
       containers:
       - name: hook
@@ -204,7 +204,7 @@ spec:
       labels:
         app: sinker
     spec:
-      serviceAccountName: "sinker"
+      serviceAccountName: sinker
       containers:
       - name: sinker
         image: gcr.io/k8s-prow/sinker:v20220628-aa928caf31
@@ -259,7 +259,7 @@ spec:
       labels:
         app: deck
     spec:
-      serviceAccountName: "deck"
+      serviceAccountName: deck
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck
@@ -368,7 +368,7 @@ spec:
       labels:
         app: horologium
     spec:
-      serviceAccountName: "horologium"
+      serviceAccountName: horologium
       terminationGracePeriodSeconds: 30
       containers:
       - name: horologium
@@ -422,7 +422,7 @@ spec:
       labels:
         app: tide
     spec:
-      serviceAccountName: "tide"
+      serviceAccountName: tide
       containers:
       - name: tide
         image: gcr.io/k8s-prow/tide:v20220628-aa928caf31
@@ -530,20 +530,20 @@ kind: ServiceAccount
 apiVersion: v1
 metadata:
   namespace: default
-  name: "deck"
+  name: deck
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "deck"
+  name: deck
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "deck"
+  name: deck
 subjects:
 - kind: ServiceAccount
-  name: "deck"
+  name: deck
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
@@ -568,13 +568,13 @@ kind: ServiceAccount
 apiVersion: v1
 metadata:
   namespace: default
-  name: "horologium"
+  name: horologium
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "horologium"
+  name: horologium
 rules:
   - apiGroups:
       - "prow.k8s.io"
@@ -589,26 +589,26 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "horologium"
+  name: horologium
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "horologium"
+  name: horologium
 subjects:
 - kind: ServiceAccount
-  name: "horologium"
+  name: horologium
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   namespace: default
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 rules:
 - apiGroups:
   - coordination.k8s.io
@@ -656,26 +656,26 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 subjects:
 - kind: ServiceAccount
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 ---
 kind: ServiceAccount
 apiVersion: v1
 metadata:
   namespace: default
-  name: "sinker"
+  name: sinker
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "sinker"
+  name: sinker
 rules:
   - apiGroups:
     - "prow.k8s.io"
@@ -722,26 +722,26 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "sinker"
+  name: sinker
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "sinker"
+  name: sinker
 subjects:
 - kind: ServiceAccount
-  name: "sinker"
+  name: sinker
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   namespace: default
-  name: "hook"
+  name: hook
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "hook"
+  name: hook
 rules:
   - apiGroups:
       - "prow.k8s.io"
@@ -765,26 +765,26 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "hook"
+  name: hook
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "hook"
+  name: hook
 subjects:
 - kind: ServiceAccount
-  name: "hook"
+  name: hook
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   namespace: default
-  name: "tide"
+  name: tide
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "tide"
+  name: tide
 rules:
   - apiGroups:
       - "prow.k8s.io"
@@ -800,14 +800,14 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: default
-  name: "tide"
+  name: tide
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "tide"
+  name: tide
 subjects:
 - kind: ServiceAccount
-  name: "tide"
+  name: tide
 #---
 #
 # TODO(#54) The statusreconciler component was added after our initial Prow setup
@@ -816,7 +816,7 @@ subjects:
 #kind: ServiceAccount
 #metadata:
 #  namespace: default
-#  name: "statusreconciler"
+#  name: statusreconciler
 #---
 #
 # TODO(#54) The statusreconciler component was added after our initial Prow setup
@@ -825,7 +825,7 @@ subjects:
 #apiVersion: rbac.authorization.k8s.io/v1
 #metadata:
 #  namespace: default
-#  name: "statusreconciler"
+#  name: statusreconciler
 #rules:
 #  - apiGroups:
 #      - "prow.k8s.io"
@@ -841,19 +841,20 @@ subjects:
 #apiVersion: rbac.authorization.k8s.io/v1
 #metadata:
 #  namespace: default
-#  name: "statusreconciler"
+#  name: statusreconciler
 #roleRef:
 #  apiGroup: rbac.authorization.k8s.io
 #  kind: Role
-#  name: "statusreconciler"
+#  name: statusreconciler
 #subjects:
 #- kind: ServiceAccount
-#  name: "statusreconciler"
+#  name: statusreconciler
 ---
 kind: ServiceAccount
 apiVersion: v1
 metadata:
-  name: "crier"
+  name: crier
+  namespace: default
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
@@ -873,15 +874,15 @@ rules:
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: "crier"
+  name: crier
   namespace: "default"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: "crier"
+  name: crier
 subjects:
 - kind: ServiceAccount
-  name: "crier"
+  name: crier
   namespace: "default"
 ---
 apiVersion: apps/v1

prow/test-pods/prow.yaml

@@ -20,15 +20,15 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: test-pods
-  name: "deck"
+  name: deck
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "deck"
+  name: deck
 subjects:
 - kind: ServiceAccount
-  name: "deck"
-  namespace: default
+  name: deck
+  namespace: prow
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
@@ -47,13 +47,13 @@ kind: ServiceAccount
 apiVersion: v1
 metadata:
   namespace: default
-  name: "horologium"
+  name: horologium
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: test-pods
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 rules:
 - apiGroups:
    - ""
@@ -71,21 +71,21 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: test-pods
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "prow-controller-manager"
+  name: prow-controller-manager
 subjects:
 - kind: ServiceAccount
-  name: "prow-controller-manager"
-  namespace: default
+  name: prow-controller-manager
+  namespace: prow
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: test-pods
-  name: "sinker"
+  name: sinker
 rules:
   - apiGroups:
       - ""
@@ -102,12 +102,12 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   namespace: test-pods
-  name: "sinker"
+  name: sinker
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: "sinker"
+  name: sinker
 subjects:
 - kind: ServiceAccount
-  name: "sinker"
-  namespace: default
+  name: sinker
+  namespace: prow