github.com/GoogleContainerTools/kpt@v1.0.0-beta.50.0.20240520170205-c25345ffcbee/package-examples/cert-manager-basic/cert-manager/clusterrole-cert-manager-edit.yaml (about)

     1  # Source: cert-manager/templates/rbac.yaml
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: cert-manager-edit
     6    labels:
     7      app: cert-manager
     8      app.kubernetes.io/name: cert-manager
     9      app.kubernetes.io/instance: cert-manager
    10      app.kubernetes.io/component: "controller"
    11      app.kubernetes.io/version: "v1.8.2"
    12      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    13      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    14  rules:
    15    - apiGroups: ["cert-manager.io"]
    16      resources: ["certificates", "certificaterequests", "issuers"]
    17      verbs: ["create", "delete", "deletecollection", "patch", "update"]
    18    - apiGroups: ["cert-manager.io"]
    19      resources: ["certificates/status"]
    20      verbs: ["update"]
    21    - apiGroups: ["acme.cert-manager.io"]
    22      resources: ["challenges", "orders"]
    23      verbs: ["create", "delete", "deletecollection", "patch", "update"]
    24