github.com/replicatedcom/ship@v0.50.0/integration/init/istio/expected/base/charts/galley/templates/clusterrole.yaml (about)

     1  ---
     2  # Source: istio/charts/galley/templates/clusterrole.yaml
     3  apiVersion: rbac.authorization.k8s.io/v1beta1
     4  kind: ClusterRole
     5  metadata:
     6    name: istio-galley-default
     7    labels:
     8      app: galley
     9      chart: galley
    10      heritage: Tiller
    11      release: istio
    12  rules:
    13  - apiGroups: ["admissionregistration.k8s.io"]
    14    resources: ["validatingwebhookconfigurations"]
    15    verbs: ["*"]
    16  - apiGroups: ["config.istio.io"] # istio mixer CRD watcher
    17    resources: ["*"]
    18    verbs: ["get", "list", "watch"]
    19  - apiGroups: ["networking.istio.io"]
    20    resources: ["*"]
    21    verbs: ["get", "list", "watch"]
    22  - apiGroups: ["authentication.istio.io"]
    23    resources: ["*"]
    24    verbs: ["get", "list", "watch"]
    25  - apiGroups: ["rbac.istio.io"]
    26    resources: ["*"]
    27    verbs: ["get", "list", "watch"]
    28  - apiGroups: ["*"]
    29    resources: ["deployments"]
    30    resourceNames: ["istio-galley"]
    31    verbs: ["get"]
    32  - apiGroups: ["*"]
    33    resources: ["endpoints"]
    34    resourceNames: ["istio-galley"]
    35    verbs: ["get"]