Fix make generate command

Makefile

@@ -116,7 +116,7 @@ update-helm: manifests yq
 
 .PHONY: generate
 generate: controller-gen ## Generate code containing DeepCopy, DeepCopyInto, and DeepCopyObject method implementations and client-go libraries.
-	$(CONTROLLER_GEN) object:headerFile="hack/boilerplate.go.txt" paths="./..."
+	$(CONTROLLER_GEN) object:headerFile="hack/boilerplate.go.txt" paths="./apis/..."
 	./hack/update-codegen.sh $(GO_CMD)
 
 .PHONY: fmt

charts/kueue/templates/rbac/role_binding.yaml

@@ -10,19 +10,3 @@ subjects:
   - kind: ServiceAccount
     name: '{{ include "kueue.fullname" . }}-controller-manager'
     namespace: '{{ .Release.Namespace }}'
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  labels:
-    control-plane: controller-manager
-  name: visibility-server-auth-reader-kube
-  namespace: kube-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: extension-apiserver-authentication-reader
-subjects:
-- kind: ServiceAccount
-  name: kueue-controller-manager
-  namespace: kueue-system

charts/kueue/templates/rbac/visibility_viewer_role.yaml

@@ -0,0 +1,17 @@
+# permissions for end users to view pending workloads.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: '{{ include "kueue.fullname" . }}-visibility-viewer-role'
+  labels:
+    rbac.kueue.x-k8s.io/batch-admin: "true"
+    rbac.kueue.x-k8s.io/batch-user: "true"
+rules:
+  - apiGroups:
+      - pending-workloads.kueue.x-k8s.io
+    resources:
+      - clusterqueues
+    verbs:
+      - get
+      - list
+      - watch

config/components/visibility/kustomization.yaml

@@ -1,15 +1,4 @@
 resources:
 - apiservice.yaml
 - role_binding.yaml
-- service.yaml
-
-patches:
-- target:
-    kind: RoleBinding
-    name: visibility-server-auth-reader
-  patch: |-
-    - op: replace
-      path: /metadata/namespace
-      value: kube-system
-
-  
+- service.yaml