| giolekva | 01a6b79 | 2021-11-11 19:01:17 +0400 | [diff] [blame] | 1 | apiVersion: rbac.authorization.k8s.io/v1 |
| 2 | kind: ClusterRole |
| 3 | metadata: |
| 4 | name: cert-manager-gandi-webhook-secret-reader |
| 5 | namespace: {{ .Release.Namespace }} |
| 6 | rules: |
| 7 | - apiGroups: |
| 8 | - "" |
| 9 | resources: |
| 10 | - secrets |
| 11 | verbs: |
| 12 | - get |
| 13 | --- |
| 14 | apiVersion: rbac.authorization.k8s.io/v1 |
| 15 | kind: ClusterRoleBinding |
| 16 | metadata: |
| 17 | name: cert-manager-gandi-webhook-secret-reader |
| 18 | namespace: {{ .Release.Namespace }} |
| 19 | roleRef: |
| 20 | apiGroup: rbac.authorization.k8s.io |
| 21 | kind: ClusterRole |
| 22 | name: cert-manager-gandi-webhook-secret-reader |
| 23 | subjects: |
| 24 | - kind: ServiceAccount |
| 25 | name: {{ .Values.certManager.gandiWebhookSecretReader }} |
| 26 | namespace: {{ .Values.certManager.namespace }} |