github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/galley/templates/clusterrole.yaml (about) 1 --- 2 # Source: istio/charts/galley/templates/clusterrole.yaml 3 apiVersion: rbac.authorization.k8s.io/v1beta1 4 kind: ClusterRole 5 metadata: 6 name: istio-galley-default 7 labels: 8 app: galley 9 chart: galley 10 heritage: Tiller 11 release: istio 12 rules: 13 - apiGroups: ["admissionregistration.k8s.io"] 14 resources: ["validatingwebhookconfigurations"] 15 verbs: ["*"] 16 - apiGroups: ["config.istio.io"] # istio mixer CRD watcher 17 resources: ["*"] 18 verbs: ["get", "list", "watch"] 19 - apiGroups: ["networking.istio.io"] 20 resources: ["*"] 21 verbs: ["get", "list", "watch"] 22 - apiGroups: ["authentication.istio.io"] 23 resources: ["*"] 24 verbs: ["get", "list", "watch"] 25 - apiGroups: ["rbac.istio.io"] 26 resources: ["*"] 27 verbs: ["get", "list", "watch"] 28 - apiGroups: ["*"] 29 resources: ["deployments"] 30 resourceNames: ["istio-galley"] 31 verbs: ["get"] 32 - apiGroups: ["*"] 33 resources: ["endpoints"] 34 resourceNames: ["istio-galley"] 35 verbs: ["get"]