github.com/replicatedcom/ship@v0.50.0/integration/init/cert-manager/expected/base/deploy/manifests/RoleBinding-cert-manager-webhook-webhook-authentication-reader-kube-system.yaml (about)

     1  
     2  # apiserver gets the ability to read authentication. This allows it to
     3  # read the specific configmap that has the requestheader-* entries to
     4  # api agg
     5  apiVersion: rbac.authorization.k8s.io/v1beta1
     6  kind: RoleBinding
     7  metadata:
     8    name: cert-manager-webhook:webhook-authentication-reader
     9    namespace: kube-system
    10    labels:
    11      app: webhook
    12      chart: webhook-v0.7.0
    13      release: cert-manager
    14      heritage: Tiller
    15  roleRef:
    16    apiGroup: rbac.authorization.k8s.io
    17    kind: Role
    18    name: extension-apiserver-authentication-reader
    19  subjects:
    20  - apiGroup: ""
    21    kind: ServiceAccount
    22    name: cert-manager-webhook
    23    namespace: cert-manager