github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/galley/templates/clusterrole.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1beta1
     2  kind: ClusterRole
     3  metadata:
     4    name: istio-galley-{{ .Release.Namespace }}
     5    labels:
     6      app: istio-galley
     7      chart: {{ .Chart.Name }}-{{ .Chart.Version }}
     8      heritage: {{ .Release.Service }}
     9      release: {{ .Release.Name }}
    10  rules:
    11  - apiGroups: ["admissionregistration.k8s.io"]
    12    resources: ["validatingwebhookconfigurations"]
    13    verbs: ["*"]
    14  - apiGroups: ["config.istio.io"] # istio mixer CRD watcher
    15    resources: ["*"]
    16    verbs: ["get", "list", "watch"]
    17  - apiGroups: ["*"]
    18    resources: ["deployments"]
    19    resourceNames: ["istio-galley"]
    20    verbs: ["get"]
    21  - apiGroups: ["*"]
    22    resources: ["endpoints"]
    23    resourceNames: ["istio-galley"]
    24    verbs: ["get"]