github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/pilot/templates/clusterrole.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1beta1
     2  kind: ClusterRole
     3  metadata:
     4    name: istio-pilot-{{ .Release.Namespace }}
     5    labels:
     6      app: istio-pilot
     7      chart: {{ .Chart.Name }}-{{ .Chart.Version }}
     8      heritage: {{ .Release.Service }}
     9      release: {{ .Release.Name }}
    10  rules:
    11  - apiGroups: ["config.istio.io"]
    12    resources: ["*"]
    13    verbs: ["*"]
    14  - apiGroups: ["rbac.istio.io"]
    15    resources: ["*"]
    16    verbs: ["get", "watch", "list"]
    17  - apiGroups: ["networking.istio.io"]
    18    resources: ["*"]
    19    verbs: ["*"]
    20  - apiGroups: ["authentication.istio.io"]
    21    resources: ["*"]
    22    verbs: ["*"]
    23  - apiGroups: ["apiextensions.k8s.io"]
    24    resources: ["customresourcedefinitions"]
    25    verbs: ["*"]
    26  - apiGroups: ["extensions"]
    27    resources: ["thirdpartyresources", "thirdpartyresources.extensions", "ingresses", "ingresses/status"]
    28    verbs: ["*"]
    29  - apiGroups: [""]
    30    resources: ["configmaps"]
    31    verbs: ["create", "get", "list", "watch", "update"]
    32  - apiGroups: [""]
    33    resources: ["endpoints", "pods", "services"]
    34    verbs: ["get", "list", "watch"]
    35  - apiGroups: [""]
    36    resources: ["namespaces", "nodes", "secrets"]
    37    verbs: ["get", "list", "watch"]