github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/certmanager/templates/rbac.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1beta1
     2  kind: ClusterRole
     3  metadata:
     4    name: certmanager
     5    labels:
     6      app: certmanager
     7  rules:
     8    - apiGroups: ["certmanager.k8s.io"]
     9      resources: ["certificates", "issuers", "clusterissuers"]
    10      verbs: ["*"]
    11    - apiGroups: [""]
    12      # TODO: remove endpoints once 0.4 is released. We include it here in case
    13      # users use the 'master' version of the Helm chart with a 0.2.x release of
    14      # certManager that still performs leader election with Endpoint resources.
    15      # We advise users don't do this, but some will anyway and this will reduce
    16      # friction.
    17      resources: ["endpoints", "configmaps", "secrets", "events", "services", "pods"]
    18      verbs: ["*"]
    19    - apiGroups: ["extensions"]
    20      resources: ["ingresses"]
    21      verbs: ["*"]
    22  ---
    23  apiVersion: rbac.authorization.k8s.io/v1beta1
    24  kind: ClusterRoleBinding
    25  metadata:
    26    name: certmanager
    27    labels:
    28      app: certmanager
    29  roleRef:
    30    apiGroup: rbac.authorization.k8s.io
    31    kind: ClusterRole
    32    name: certmanager
    33  subjects:
    34    - name: certmanager
    35      namespace: {{ .Release.Namespace }}
    36      kind: ServiceAccount