github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/sidecarInjectorWebhook/templates/clusterrole.yaml (about) 1 apiVersion: rbac.authorization.k8s.io/v1beta1 2 kind: ClusterRole 3 metadata: 4 name: istio-sidecar-injector-{{ .Release.Namespace }} 5 labels: 6 app: istio-sidecar-injector 7 chart: {{ .Chart.Name }}-{{ .Chart.Version }} 8 heritage: {{ .Release.Service }} 9 release: {{ .Release.Name }} 10 rules: 11 - apiGroups: ["*"] 12 resources: ["configmaps"] 13 verbs: ["get", "list", "watch"] 14 - apiGroups: ["admissionregistration.k8s.io"] 15 resources: ["mutatingwebhookconfigurations"] 16 verbs: ["get", "list", "watch", "patch"]