github.com/wmuizelaar/kpt@v0.0.0-20221018115725-bd564717b2ed/package-examples/cert-manager-basic/cainjector/clusterrole-cert-manager-cainjector.yaml (about)

     1  # Source: cert-manager/templates/cainjector-rbac.yaml
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: cert-manager-cainjector
     6    labels:
     7      app: cainjector
     8      app.kubernetes.io/name: cainjector
     9      app.kubernetes.io/instance: cert-manager
    10      app.kubernetes.io/component: "cainjector"
    11      app.kubernetes.io/version: "v1.8.2"
    12  rules:
    13    - apiGroups: ["cert-manager.io"]
    14      resources: ["certificates"]
    15      verbs: ["get", "list", "watch"]
    16    - apiGroups: [""]
    17      resources: ["secrets"]
    18      verbs: ["get", "list", "watch"]
    19    - apiGroups: [""]
    20      resources: ["events"]
    21      verbs: ["get", "create", "update", "patch"]
    22    - apiGroups: ["admissionregistration.k8s.io"]
    23      resources: ["validatingwebhookconfigurations", "mutatingwebhookconfigurations"]
    24      verbs: ["get", "list", "watch", "update"]
    25    - apiGroups: ["apiregistration.k8s.io"]
    26      resources: ["apiservices"]
    27      verbs: ["get", "list", "watch", "update"]
    28    - apiGroups: ["apiextensions.k8s.io"]
    29      resources: ["customresourcedefinitions"]
    30      verbs: ["get", "list", "watch", "update"]
    31