The default VAULT_ROLE env var sets a default for all kinds of mutations, regardless of where (namespace) the actual injection happens.
In case of pods, the injection happens in the pods's namespace. In case of secrets and configmaps, the injection happens in the vault secrets webhook namespace.
We should have a separate global default for these two cases.
The default VAULT_ROLE env var sets a default for all kinds of mutations, regardless of where (namespace) the actual injection happens.
In case of pods, the injection happens in the pods's namespace. In case of secrets and configmaps, the injection happens in the vault secrets webhook namespace.
We should have a separate global default for these two cases.