From 6ebc881815eb2ce9864044a39ef12f11ec7deca0 Mon Sep 17 00:00:00 2001
From: Marco Ebert <marco@giantswarm.io>
Date: Thu, 10 Nov 2022 17:34:23 +0100
Subject: [PATCH] RBAC: Move `RoleBinding` to separate file.

---
 CHANGELOG.md                                     |  1 +
 .../templates/controller-rolebinding.yaml        | 15 +++++++++++++++
 .../templates/rbac.yaml                          | 16 ----------------
 3 files changed, 16 insertions(+), 16 deletions(-)
 create mode 100644 helm/nginx-ingress-controller-app/templates/controller-rolebinding.yaml

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9cea62734..8187f01c4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -40,6 +40,7 @@ and this project's packages adheres to [Semantic Versioning](http://semver.org/s
 - Webhook: Align to upstream. ([#374](https://github.com/giantswarm/nginx-ingress-controller-app/pull/374))
 - RBAC: Align to upstream. ([#378](https://github.com/giantswarm/nginx-ingress-controller-app/pull/378))
   - RBAC: Move `ClusterRoleBinding` to separate file.
+  - RBAC: Move `RoleBinding` to separate file.
 
 ## [2.20.0] - 2022-11-02
 
diff --git a/helm/nginx-ingress-controller-app/templates/controller-rolebinding.yaml b/helm/nginx-ingress-controller-app/templates/controller-rolebinding.yaml
new file mode 100644
index 000000000..f90fde3e3
--- /dev/null
+++ b/helm/nginx-ingress-controller-app/templates/controller-rolebinding.yaml
@@ -0,0 +1,15 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ include "ingress-nginx.fullname" . }}-ng
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "ingress-nginx.labels" . | nindent 4 }}
+subjects:
+- kind: ServiceAccount
+  name: {{ include "ingress-nginx.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: {{ include "ingress-nginx.fullname" . }}
+  apiGroup: rbac.authorization.k8s.io
diff --git a/helm/nginx-ingress-controller-app/templates/rbac.yaml b/helm/nginx-ingress-controller-app/templates/rbac.yaml
index cab288bdb..0bdbfc12e 100644
--- a/helm/nginx-ingress-controller-app/templates/rbac.yaml
+++ b/helm/nginx-ingress-controller-app/templates/rbac.yaml
@@ -1,19 +1,3 @@
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ include "ingress-nginx.fullname" . }}-ng
-  namespace: {{ .Release.Namespace }}
-  labels:
-    {{- include "ingress-nginx.labels" . | nindent 4 }}
-subjects:
-- kind: ServiceAccount
-  name: {{ include "ingress-nginx.fullname" . }}
-  namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: Role
-  name: {{ include "ingress-nginx.fullname" . }}
-  apiGroup: rbac.authorization.k8s.io
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata: