github.com/replicatedcom/ship@v0.50.0/integration/init/istio-1.0.3/expected/.ship/upstream/charts/sidecarInjectorWebhook/templates/clusterrole.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1beta1
     2  kind: ClusterRole
     3  metadata:
     4    name: istio-sidecar-injector-{{ .Release.Namespace }}
     5    labels:
     6      app: istio-sidecar-injector
     7      chart: {{ .Chart.Name }}-{{ .Chart.Version }}
     8      heritage: {{ .Release.Service }}
     9      release: {{ .Release.Name }}
    10  rules:
    11  - apiGroups: ["*"]
    12    resources: ["configmaps"]
    13    verbs: ["get", "list", "watch"]
    14  - apiGroups: ["admissionregistration.k8s.io"]
    15    resources: ["mutatingwebhookconfigurations"]
    16    verbs: ["get", "list", "watch", "patch"]