Missing CRD ClusterRoles and ClusterRolebindings when crd helm chart is used

[raphaelzoellner]

Summary

When making use of the new crd helm chart and setting crdwebhook.enabled to false for the core helm chart as suggested this leads to ClusterRoles and ClusterRoleBindings related to the custom resource definitions not being created by the core helm chart.

Reproduction

helm template neuvector-core .\charts\core\ --set crdwebhook.enabled=false -s templates/crd-role.yaml

Suggestion

The ClusterRoles and ClusterRolebindings defined in the crd-role.yaml and crd-role-least.yaml templates are still needed when making use of the new crd helm chart and should therefore not be disabled when crdwebhook.enabled is set to false.

I suggest adding a new value crd.rbac.enabled which is by default set to true to control creation of the crd related RBAC resources instead.

[Nateb1121]

We're also having this issue and have submitted ticket 00697926 to SUSE for this.