Removing the Vault Webhooks ability to update secrets in it's clusterrole is causing a seemingly unrelated error and I can not make sense of it.
time="2022-09-21T23:55:59Z" level=error msg="Admission review request failed" app=vault-secrets-webhook dry-run=false error="failed to create app authentication, opts: {Namespace:vector ServiceAccountName:vector ImagePullSecrets:[]}: serviceaccounts \"vector\" is forbidden: User \"\" cannot get resource \"serviceaccounts\" in API group \"\" in the namespace \"vector\"" kind=v1/Pod name= ns=vector op=create path=/pods request-id=0000 webhook-id=vault-secrets-pods webhook-kind=mutating wh-version=v1beta1
I would expect for the Webhook to complain that it's unable to update a secret but this seems like it defaults to some other behavior?
This is the helm chart that is being deployed.