fix: separate ServiceAccount for router workloads#433

Open

ambient-code[bot] wants to merge 8 commits intomainfrom

fix/351-separate-service-accounts

Commits on Apr 15, 2026

fix: separate ServiceAccount for router workloads (zero RBAC)

Ambient Code Bot
and
claude
committed
fix: revert Helm chart changes per maintainer feedback

Ambient Code Bot
and
claude
committed
fix: allow router SA to access K8s API for config loading

Ambient Code Bot
and
claude
committed
fix: remove unnecessary secrets permission from router Role

Ambient Code Bot
and
claude
committed
fix: address review nits on router SA comments

Ambient Code Bot
and
claude
committed
fix: handle immutable RoleRef in RoleBinding reconciliation

Ambient Code Bot
and
claude
committed
fix: add RBAC unit tests and reduce log noise in reconcileRoleBinding

Ambient Code Bot
and
claude
committed
fix: add log for absent RoleBinding and assert ResourceVersion in no-op test

Ambient Code Bot
and
claude
committed