1. Use different names for the 2 roles (and the related role bindings) 2. Make sure the role binding namespace is the same as the namespace where nfs provisioner is deployed Signed-off-by: Shuo Wu <shuo@rancher.com>