Merge pull request #4009 from Vacant2333/fix_helm_install_clusterrole_to_wrong_cluster

fix helm install clusterrole to wrong cluster

charts/karmada/templates/_karmada-clusterrole.tpl

@@ -1,3 +1,4 @@
+{{- define "karmada.clusterrole" -}}
 # This configuration is used to grant the admin clusterrole read
 # and write permissions for Karmada resources.
 
@@ -147,3 +148,4 @@ rules:
       - deletecollection
       - patch
       - update
+{{- end -}}

charts/karmada/templates/pre-install-job.yaml

@@ -135,7 +135,8 @@ data:
     {{- include "karmada.proxyRbac" . | nindent 8 }}
   {{- print "bootstrap-token-configuration.yaml: " | nindent 6 }} |-
     {{- include "karmada.bootstrapToken.configuration" . | nindent 8 }}
-
+  {{- print "clusterrole.yaml: " | nindent 6 }} |-
+    {{- include "karmada.clusterrole" . | nindent 8 }}
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -242,6 +243,8 @@ data:
         {{- include "karmada.proxyRbac" . | nindent 8 }}
       {{- print "bootstrap-token-configuration.yaml: " | nindent 6 }} |-
         {{- include "karmada.bootstrapToken.configuration" . | nindent 8 }}
+      {{- print "clusterrole.yaml: " | nindent 6 }} |-
+        {{- include "karmada.clusterrole" . | nindent 8 }}
   crds-patches-configmaps.yaml: |-
     apiVersion: v1
     kind: ConfigMap

charts/karmada/values.yaml

@@ -526,7 +526,7 @@ kubeControllerManager:
     rollingUpdate:
       maxUnavailable: 0
       maxSurge: 50%
-  controllers: namespace,garbagecollector,serviceaccount-token,ttl-after-finished,bootstrapsigner,tokencleaner,csrapproving,csrcleaner,csrsigning
+  controllers: namespace,garbagecollector,serviceaccount-token,ttl-after-finished,bootstrapsigner,tokencleaner,csrapproving,csrcleaner,csrsigning,clusterrole-aggregation
   ## @param apiServer.podDisruptionBudget
   podDisruptionBudget: *podDisruptionBudget