github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/cert-manager/templates/cainjector-psp-clusterrolebinding.yaml (about) 1 {{- if .Values.cainjector.enabled }} 2 {{- if .Values.global.podSecurityPolicy.enabled }} 3 {{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }} 4 apiVersion: rbac.authorization.k8s.io/v1 5 kind: ClusterRoleBinding 6 metadata: 7 name: {{ template "cainjector.fullname" . }}-psp 8 labels: 9 app: {{ include "cainjector.name" . }} 10 app.kubernetes.io/name: {{ include "cainjector.name" . }} 11 app.kubernetes.io/instance: {{ .Release.Name }} 12 app.kubernetes.io/component: "cainjector" 13 {{- include "labels" . | nindent 4 }} 14 roleRef: 15 apiGroup: rbac.authorization.k8s.io 16 kind: ClusterRole 17 name: {{ template "cainjector.fullname" . }}-psp 18 subjects: 19 - kind: ServiceAccount 20 name: {{ template "cainjector.serviceAccountName" . }} 21 namespace: {{ include "cert-manager.namespace" . }} 22 {{- end }} 23 {{- end }} 24 {{- end }}