github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/cert-manager/templates/webhook-psp-clusterrolebinding.yaml (about)

     1  {{- if .Values.global.podSecurityPolicy.enabled }}
     2  {{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  kind: ClusterRoleBinding
     5  metadata:
     6    name: {{ template "webhook.fullname" . }}-psp
     7    labels:
     8      app: {{ include "webhook.name" . }}
     9      app.kubernetes.io/name: {{ include "webhook.name" . }}
    10      app.kubernetes.io/instance: {{ .Release.Name }}
    11      app.kubernetes.io/component: "webhook"
    12      {{- include "labels" . | nindent 4 }}
    13  roleRef:
    14    apiGroup: rbac.authorization.k8s.io
    15    kind: ClusterRole
    16    name: {{ template "webhook.fullname" . }}-psp
    17  subjects:
    18    - kind: ServiceAccount
    19      name: {{ template "webhook.serviceAccountName" . }}
    20      namespace: {{ include "cert-manager.namespace" . }}
    21  {{- end }}
    22  {{- end }}