Compare commits
4 Commits
c2272e3816
...
778852b76a
Author | SHA1 | Date | |
---|---|---|---|
778852b76a | |||
929e92e187 | |||
5eb483e8be | |||
4436f3d7c0 |
@ -88,42 +88,3 @@ subjects:
|
|||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
name: {{ .Values.certManager.serviceAccountName }}
|
name: {{ .Values.certManager.serviceAccountName }}
|
||||||
namespace: {{ .Values.certManager.namespace }}
|
namespace: {{ .Values.certManager.namespace }}
|
||||||
---
|
|
||||||
# Grant pod account permission to validate using our apiserver
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}:flowcontrol
|
|
||||||
labels:
|
|
||||||
app: {{ include "freedns-webhook.name" . }}
|
|
||||||
chart: {{ include "freedns-webhook.chart" . }}
|
|
||||||
release: {{ .Release.Name }}
|
|
||||||
heritage: {{ .Release.Service }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- "flowcontrol.apiserver.k8s.io"
|
|
||||||
resources:
|
|
||||||
- 'prioritylevelconfigurations'
|
|
||||||
- 'flowschemas'
|
|
||||||
verbs:
|
|
||||||
- 'list'
|
|
||||||
- 'watch'
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}:flowcontrol
|
|
||||||
labels:
|
|
||||||
app: {{ include "freedns-webhook.name" . }}
|
|
||||||
chart: {{ include "freedns-webhook.chart" . }}
|
|
||||||
release: {{ .Release.Name }}
|
|
||||||
heritage: {{ .Release.Service }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}:flowcontrol
|
|
||||||
subjects:
|
|
||||||
- apiGroup: ""
|
|
||||||
kind: ServiceAccount
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
|
Loading…
Reference in New Issue
Block a user