Helena Butow

@jurgenweber any luck in getting this to work with a ServiceAccount?

Here's a rough recipe for what I've managed to get working with IAM roles scoped to a Kubernetes ServiceAccount and a single AWS account: 1. use the `latest` tag for...

> So you were able to make it work with just one role for ArgoCD SA? You didn't have to create any roles for the clusters that ArgoCD was managing?...

Correct. Both of these variants will allow a ResourceQuota to be created but it doesn't result in a quota that's enforced: ``` count/spod.security-profiles-operator.x-k8s.io: "100" count/spods.security-profiles-operator.x-k8s.io: "100" ```

/remove-lifecycle stale

/remove-lifecycle stale

Sorry, no. I removed the stale label because I think that this is still an issue.