Helm Service account Role binding issue

Products

• CA API Developer Portal

Issue/Introduction

During helm portal upgrade the service account role binding stopped , the created service account do not have proper role to continue execution.

18:19:35 upgrade.go:431: [debug] warning: Upgrade "developer-portal" failed: pre-upgrade hooks failed: roles.rbac.authorization.k8s.io "developer-portal-cert-update" is forbidden: User "system:serviceaccount:sb-1592-broadcom-apidevportal:jenkins" cannot delete resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "test123"

Environment

API Supported versions of Portal on Kubernetes.

Resolution

Disabled the creation on serviceAccount during upgrade.

serviceAccount:
  create: false
name: portal-service-account
rbac:
  create: false