github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/mixer/templates/clusterrole.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1beta1
     2  kind: ClusterRole
     3  metadata:
     4    name: istio-mixer-{{ .Release.Namespace }}
     5    labels:
     6      app: {{ template "mixer.name" . }}
     7      chart: {{ .Chart.Name }}-{{ .Chart.Version }}
     8      heritage: {{ .Release.Service }}
     9      release: {{ .Release.Name }}
    10  rules:
    11  - apiGroups: ["config.istio.io"] # istio CRD watcher
    12    resources: ["*"]
    13    verbs: ["create", "get", "list", "watch", "patch"]
    14  - apiGroups: ["rbac.istio.io"] # istio RBAC watcher
    15    resources: ["*"]
    16    verbs: ["get", "list", "watch"]
    17  - apiGroups: ["apiextensions.k8s.io"]
    18    resources: ["customresourcedefinitions"]
    19    verbs: ["get", "list", "watch"]
    20  - apiGroups: [""]
    21    resources: ["configmaps", "endpoints", "pods", "services", "namespaces", "secrets", "replicationcontrollers"]
    22    verbs: ["get", "list", "watch"]
    23  - apiGroups: ["extensions"]
    24    resources: ["replicasets"]
    25    verbs: ["get", "list", "watch"]
    26  - apiGroups: ["apps"]
    27    resources: ["replicasets"]
    28    verbs: ["get", "list", "watch"]