github.com/GoogleContainerTools/kpt@v1.0.0-beta.50.0.20240520170205-c25345ffcbee/package-examples/cert-manager-basic/cert-manager/clusterrole-cert-manager-view.yaml (about)

     1  # Source: cert-manager/templates/rbac.yaml
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: cert-manager-view
     6    labels:
     7      app: cert-manager
     8      app.kubernetes.io/name: cert-manager
     9      app.kubernetes.io/instance: cert-manager
    10      app.kubernetes.io/component: "controller"
    11      app.kubernetes.io/version: "v1.8.2"
    12      rbac.authorization.k8s.io/aggregate-to-view: "true"
    13      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    14      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    15  rules:
    16    - apiGroups: ["cert-manager.io"]
    17      resources: ["certificates", "certificaterequests", "issuers"]
    18      verbs: ["get", "list", "watch"]
    19    - apiGroups: ["acme.cert-manager.io"]
    20      resources: ["challenges", "orders"]
    21      verbs: ["get", "list", "watch"]
    22