blob: ce27cccd17653c4d707fd975687a8bf61c945b80 [file] [log] [blame]
Giorgi Lekveishviliefc43ea2024-09-09 19:11:41 +04001apiVersion: rbac.authorization.k8s.io/v1
2kind: Role
3metadata:
4 name: secrets
5 namespace: {{ .Release.Namespace }}
6rules:
7- apiGroups: [""]
8 resources: ["secrets"]
9 verbs: ["get", "watch", "list", "patch", "update"]
10---
11apiVersion: rbac.authorization.k8s.io/v1
12kind: RoleBinding
13metadata:
14 name: secrets
15 namespace: {{ .Release.Namespace }}
16subjects:
17- kind: ServiceAccount
18 name: {{ .Values.serviceAccountName }}
19 namespace: {{ .Release.Namespace }}
20roleRef:
21 kind: Role
22 name: secrets
23 apiGroup: rbac.authorization.k8s.io