istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/charts/istio-control/istio-discovery/templates/clusterrolebinding.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRoleBinding
     3  metadata:
     4    name: istiod-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
     5    labels:
     6      app: istiod
     7      release: {{ .Release.Name }}
     8  roleRef:
     9    apiGroup: rbac.authorization.k8s.io
    10    kind: ClusterRole
    11    name: istiod-clusterrole{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
    12  subjects:
    13    - kind: ServiceAccount
    14      name: istiod{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}
    15      namespace: {{ .Values.global.istioNamespace }}
    16  ---
    17  {{- if not (eq (toString .Values.pilot.env.PILOT_ENABLE_GATEWAY_API_DEPLOYMENT_CONTROLLER) "false") }}
    18  apiVersion: rbac.authorization.k8s.io/v1
    19  kind: ClusterRoleBinding
    20  metadata:
    21    name: istiod-gateway-controller{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
    22    labels:
    23      app: istiod
    24      release: {{ .Release.Name }}
    25  roleRef:
    26    apiGroup: rbac.authorization.k8s.io
    27    kind: ClusterRole
    28    name: istiod-gateway-controller{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}-{{ .Release.Namespace }}
    29  subjects:
    30  - kind: ServiceAccount
    31    name: istiod{{- if not (eq .Values.revision "")}}-{{ .Values.revision }}{{- end }}
    32    namespace: {{ .Values.global.istioNamespace }}
    33  {{- end }}