istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/charts/istio-cni/templates/clusterrolebinding.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRoleBinding
     3  metadata:
     4    name: {{ template "name" . }}
     5    labels:
     6      app: {{ template "name" . }}
     7      release: {{ .Release.Name }}
     8      istio.io/rev: {{ .Values.revision | default "default" }}
     9      install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    10      operator.istio.io/component: "Cni"
    11  roleRef:
    12    apiGroup: rbac.authorization.k8s.io
    13    kind: ClusterRole
    14    name: {{ template "name" . }}
    15  subjects:
    16  - kind: ServiceAccount
    17    name: {{ template "name" . }}
    18    namespace: {{ .Release.Namespace }}
    19  ---
    20  {{- if .Values.cni.repair.enabled }}
    21  apiVersion: rbac.authorization.k8s.io/v1
    22  kind: ClusterRoleBinding
    23  metadata:
    24    name: {{ template "name" . }}-repair-rolebinding
    25    labels:
    26      k8s-app: {{ template "name" . }}-repair
    27      release: {{ .Release.Name }}
    28      istio.io/rev: {{ .Values.revision | default "default" }}
    29      install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    30      operator.istio.io/component: "Cni"
    31  subjects:
    32  - kind: ServiceAccount
    33    name: {{ template "name" . }}
    34    namespace: {{ .Release.Namespace}}
    35  roleRef:
    36    apiGroup: rbac.authorization.k8s.io
    37    kind: ClusterRole
    38    name: {{ template "name" . }}-repair-role
    39  {{- end }}
    40  ---
    41  {{- if .Values.cni.ambient.enabled }}
    42  apiVersion: rbac.authorization.k8s.io/v1
    43  kind: ClusterRoleBinding
    44  metadata:
    45    name: {{ template "name" . }}-ambient
    46    labels:
    47      k8s-app: {{ template "name" . }}-repair
    48      release: {{ .Release.Name }}
    49      istio.io/rev: {{ .Values.revision | default "default" }}
    50      install.operator.istio.io/owning-resource: {{ .Values.ownerName | default "unknown" }}
    51      operator.istio.io/component: "Cni"
    52  subjects:
    53    - kind: ServiceAccount
    54      name: {{ template "name" . }}
    55      namespace: {{ .Release.Namespace}}
    56  roleRef:
    57    apiGroup: rbac.authorization.k8s.io
    58    kind: ClusterRole
    59    name: {{ template "name" . }}-ambient
    60  {{- end }}