Current Helm deployment 

RBAC setup:

Problems, when component is deployed individually (without "onap" master chart):

• ClusterRoleBinding "onap-binding" is missing and need to be added before deployment

• "onap-roles-wrapper" is required, as onap-* roles are used by the "ServiceAccount" chart (https://gitlab.devops.telekom.de/tnap/operations/playground/guido_rosenbaum/oom/-/tree/master/kubernetes/common/serviceAccount)

• ServiceAccount chart uses a naming schema for the default "role" binding  -> $name := printf "%s-%s" (include "common.release" $dot) $role_typ

Solution for individual component deployment

The common chart "ServiceAccount" needs to be extended to support the "default" Role creation (here using a new parameter "createDefaultRoles"):

Jira created: OOM-3233: Role Creation support in ServiceAccount ChartClosed