githubConfigSecret and controller SA role issue

[scottmelhop]

I just tried to set this up for the first time, split the controller and runners into different namespaces, and use githubConfigSecret. The controller SA is trying to read the secret from the runner namespace, which it is not allowed to do. Deploying them to the same namespace works but its not the "recommended" thing to do. I also had to add create verbs to roles, rolebindings and serviceaccount to get it to work. Am I doing something wrong?