From 1ed698a22b039dd6eee244d6197a04812c9b10a0 Mon Sep 17 00:00:00 2001
From: Alex Welsh <alex@stackhpc.com>
Date: Fri, 17 Apr 2026 14:33:02 +0100
Subject: [PATCH] Add namespaces rule for default service account

Error from kubernetes nodepool launcher log:
"Failure", "message":"namespaces is forbidden: User
\"system:serviceaccount:zuul:default\" cannot list resource
\"namespaces\" in API group \"\" at the cluster scope"
---
 ansible/inventory/group_vars/all/rbac | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ansible/inventory/group_vars/all/rbac b/ansible/inventory/group_vars/all/rbac
index 881afbf..dc6ff80 100644
--- a/ansible/inventory/group_vars/all/rbac
+++ b/ansible/inventory/group_vars/all/rbac
@@ -120,6 +120,9 @@ zuul_operator_rbac: |
   - kind: ServiceAccount
     name: zuul-operator
     namespace: zuul
+  - kind: ServiceAccount
+    name: default
+    namespace: zuul
   roleRef:
     kind: ClusterRole
     name: cluster-admin #zuul-operator