github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/external-dns/templates/clusterrole.yaml (about)

     1  {{- if .Values.rbac.create }}
     2  apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}
     3  kind: ClusterRole
     4  metadata:
     5    name: {{ template "external-dns.fullname" . }}
     6    labels: {{ include "external-dns.labels" . | nindent 4 }}
     7  rules:
     8  - apiGroups:
     9    - ""
    10    resources:
    11    - services
    12    - pods
    13    - nodes
    14    - endpoints
    15    verbs:
    16    - get
    17    - list
    18    - watch
    19  - apiGroups:
    20    - extensions
    21    - "networking.k8s.io" # k8s 1.14+
    22    resources:
    23    - ingresses
    24    verbs:
    25    - get
    26    - list
    27    - watch
    28  - apiGroups:
    29    - networking.istio.io
    30    resources:
    31    - gateways
    32    verbs:
    33    - get
    34    - list
    35    - watch
    36  {{- if or .Values.crd.create .Values.crd.apiversion }}
    37  - apiGroups:
    38    {{- if .Values.crd.create }}
    39    - externaldns.k8s.io
    40    {{- else }}
    41    - {{ $api := splitn "/" 2 .Values.crd.apiversion }}{{ $api._0 }}
    42    {{- end }}
    43    resources:
    44    {{- if .Values.crd.create }}
    45    - dnsendpoints
    46    {{- else }}
    47    - {{ printf "%ss" (.Values.crd.kind | lower) }}
    48    {{- end }}
    49    verbs:
    50    - get
    51    - list
    52    - watch
    53  - apiGroups:
    54    {{- if .Values.crd.create }}
    55    - externaldns.k8s.io
    56    {{- else }}
    57    - {{ $api := splitn "/" 2 .Values.crd.apiversion }}{{ $api._0 }}
    58    {{- end }}
    59    resources:
    60    {{- if .Values.crd.create }}
    61    - dnsendpoints/status
    62    {{- else }}
    63    - {{ printf "%ss/status" (.Values.crd.kind | lower) }}
    64    {{- end }}
    65    verbs:
    66    - update
    67  {{- end }}
    68  {{- end }}