github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/galley/templates/clusterrole.yaml (about) 1 apiVersion: rbac.authorization.k8s.io/v1beta1 2 kind: ClusterRole 3 metadata: 4 name: istio-galley-{{ .Release.Namespace }} 5 labels: 6 app: istio-galley 7 chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 heritage: {{ .Release.Service }} 9 release: {{ .Release.Name }} 10 rules: 11 - apiGroups: ["admissionregistration.k8s.io"] 12 resources: ["validatingwebhookconfigurations"] 13 verbs: ["*"] 14 - apiGroups: ["config.istio.io"] # istio mixer CRD watcher 15 resources: ["*"] 16 verbs: ["get", "list", "watch"] 17 - apiGroups: ["*"] 18 resources: ["deployments"] 19 resourceNames: ["istio-galley"] 20 verbs: ["get"] 21 - apiGroups: ["*"] 22 resources: ["endpoints"] 23 resourceNames: ["istio-galley"] 24 verbs: ["get"]