github.com/wmuizelaar/kpt@v0.0.0-20221018115725-bd564717b2ed/package-examples/cert-manager-basic/cainjector/role-cert-manager-cainjector-leaderelection.yaml (about)

     1  # Source: cert-manager/templates/cainjector-rbac.yaml
     2  # leader election rules
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  kind: Role
     5  metadata:
     6    name: cert-manager-cainjector:leaderelection
     7    namespace: kube-system
     8    labels:
     9      app: cainjector
    10      app.kubernetes.io/name: cainjector
    11      app.kubernetes.io/instance: cert-manager
    12      app.kubernetes.io/component: "cainjector"
    13      app.kubernetes.io/version: "v1.8.2"
    14  rules:
    15    # Used for leader election by the controller
    16    # cert-manager-cainjector-leader-election is used by the CertificateBased injector controller
    17    #   see cmd/cainjector/start.go#L113
    18    # cert-manager-cainjector-leader-election-core is used by the SecretBased injector controller
    19    #   see cmd/cainjector/start.go#L137
    20    - apiGroups: ["coordination.k8s.io"]
    21      resources: ["leases"]
    22      resourceNames: ["cert-manager-cainjector-leader-election", "cert-manager-cainjector-leader-election-core"]
    23      verbs: ["get", "update", "patch"]
    24    - apiGroups: ["coordination.k8s.io"]
    25      resources: ["leases"]
    26      verbs: ["create"]
    27