github.com/kubevela/workflow@v0.6.0/charts/vela-workflow/templates/admission-webhooks/job-patch/clusterrole.yaml (about)

     1  {{- if and .Values.admissionWebhooks.enabled .Values.admissionWebhooks.patch.enabled .Values.rbac.create (not .Values.admissionWebhooks.certManager.enabled) }}
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name:  {{ template "kubevela.fullname" . }}-admission
     6    annotations:
     7      "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade
     8      "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
     9    labels:
    10      app: {{ template "kubevela.name" . }}-admission
    11      {{- include "kubevela.labels" . | nindent 4 }}
    12  rules:
    13    - apiGroups:
    14        - admissionregistration.k8s.io
    15      resources:
    16        - validatingwebhookconfigurations
    17        - mutatingwebhookconfigurations
    18      verbs:
    19        - get
    20        - update
    21    - apiGroups:
    22        - apiextensions.k8s.io
    23      resources:
    24        - customresourcedefinitions
    25      verbs:
    26        - get
    27        - update
    28  {{- end }}