From b1a9603faa132172a9f3a657f0059a6f2587745e Mon Sep 17 00:00:00 2001
From: Dario Tranchitella <dario@tranchitella.eu>
Date: Thu, 1 Jul 2021 16:21:03 +0200
Subject: [PATCH] fix: ensuring single reconciliation for Capsule RoleBinding
 resources

---
 controllers/tenant_controller.go | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/controllers/tenant_controller.go b/controllers/tenant_controller.go
index 96e40bf3..f256c367 100644
--- a/controllers/tenant_controller.go
+++ b/controllers/tenant_controller.go
@@ -614,8 +614,9 @@ func (r *TenantReconciler) ownerRoleBinding(tenant *capsulev1alpha1.Tenant) erro
 	l := map[string]string{tl: tenant.Name}
 	s := []rbacv1.Subject{
 		{
-			Kind: tenant.Spec.Owner.Kind.String(),
-			Name: tenant.Spec.Owner.Name,
+			APIGroup: "rbac.authorization.k8s.io",
+			Kind:     tenant.Spec.Owner.Kind.String(),
+			Name:     tenant.Spec.Owner.Name,
 		},
 	}