The ESO subchart was prefixing the ServiceAccount with the parent release name (qsoft-platform-external-secrets), breaking both ClusterSecretStore.serviceAccountRef and OpenBao's role binding which both expect plain 'external-secrets'. Lock the name via fullnameOverride.
13 KiB
13 KiB