cannot get resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope

[raffis]

Describe the bug The 6.7.x chart requires permission to read/create cluster scoped resources like ClusterRole which was not the case before and is a breaking change.

To Reproduce Steps to reproduce the behavior: Install v1.13.7 helm chart using a user without access to cluster resources like ClusterRole/ClusterRoleBinding. You will run into cannot get resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope.

Expected behavior With the chart v6.7.x scope.singleNamespace actually disabled all Cluster wide rbac resources. While the v6.6.x still creates cluster scoped resources https://github.com/emissary-ingress/emissary/blob/master/charts/ambassador/templates/rbac.yaml#L1-L4.

It should be possible to install the chart without cluster wide permission.

Versions (please complete the following information):

• Ambassador: v1.13.7
• helm chart: 6.7.10

[jasonniconuan]

I know this issue is old but I'm experiencing the same issue, were you able to resolve it?