Namespaces.

kubernetes/apps/cert-manager/webhook-dnsimple/app/kustomization.yaml

@@ -2,7 +2,6 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: cert-manager
 resources:
   - ./apiservice.yaml
   - ./helmrelease.yaml

kubernetes/apps/cert-manager/webhook-dnsimple/app/rbac.yaml

@@ -70,7 +70,7 @@ roleRef:
 subjects:
   - apiGroup: ""
     kind: ServiceAccount
-    name: cert-manager
+    name: webhook-dnsimple
     namespace: cert-manager
 ---
 # Grant the webhook permission to read the api-token Secret in the specified namespace.

kubernetes/apps/cert-manager/webhook-dnsimple/ks.yaml

@@ -6,6 +6,7 @@ metadata:
   name: cert-manager-webhook-dnsimple
   namespace: flux-system
 spec:
+  targetNamespace: cert-manager
   interval: 10m
   path: "./kubernetes/apps/cert-manager/webhook-dnsimple/app"
   prune: true