Fix: rolebindingClusterAdminRole check

Fix additionalSchemaStrings templating
FairwindsOps · Oct 7, 2024 · 39f0bf2 · 39f0bf2
1 parent 9b5438d
commit 39f0bf2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/config/checks/rolebindingClusterAdminRole.yaml b/pkg/config/checks/rolebindingClusterAdminRole.yaml
@@ -43,10 +43,10 @@ schemaString: |
               minLength: 1
 additionalSchemaStrings:
   rbac.authorization.k8s.io/Role: |
-    type: object
-    # This schema is validated for all roleBindings, regardless of their roleRef.
     {{ if eq .roleRef.kind "Role" }}
     {{ if and (not (hasPrefix .metadata.name "system:")) (ne .metadata.name "gce:podsecuritypolicy:calico-sa") }}
+    # This schema is validated for all roleBindings, regardless of their roleRef.
+    type: object
     required: ["metadata", "rules"]
     allOf:
       - properties: