-
Bug
-
Resolution: Done
-
Blocker
-
maistra-2.1.0
-
None
In MAISTRA-1621 we changed the pruner so it also prunes in member namespaces instead of just the mesh namespace and the cluster scope. Because RoleBindings are copied from the mesh namespace to the member namespaces (which includes their labels), they are now pruned by the pruner. So, with every change of the SMCP, the pruner now deletes the RoleBindings, but the SMM controller quickly recreates them, so we never noticed the deletion.
The pruner should never delete these RoleBindings, as they are managed by the SMM controller.
The same thing happens with NetworkPolicies.