Compare commits
4 Commits
c2272e3816
...
778852b76a
| Author | SHA1 | Date | |
|---|---|---|---|
| 778852b76a | |||
| 929e92e187 | |||
| 5eb483e8be | |||
| 4436f3d7c0 |
@@ -88,42 +88,3 @@ subjects:
|
|||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
name: {{ .Values.certManager.serviceAccountName }}
|
name: {{ .Values.certManager.serviceAccountName }}
|
||||||
namespace: {{ .Values.certManager.namespace }}
|
namespace: {{ .Values.certManager.namespace }}
|
||||||
---
|
|
||||||
# Grant pod account permission to validate using our apiserver
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRole
|
|
||||||
metadata:
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}:flowcontrol
|
|
||||||
labels:
|
|
||||||
app: {{ include "freedns-webhook.name" . }}
|
|
||||||
chart: {{ include "freedns-webhook.chart" . }}
|
|
||||||
release: {{ .Release.Name }}
|
|
||||||
heritage: {{ .Release.Service }}
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- "flowcontrol.apiserver.k8s.io"
|
|
||||||
resources:
|
|
||||||
- 'prioritylevelconfigurations'
|
|
||||||
- 'flowschemas'
|
|
||||||
verbs:
|
|
||||||
- 'list'
|
|
||||||
- 'watch'
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}:flowcontrol
|
|
||||||
labels:
|
|
||||||
app: {{ include "freedns-webhook.name" . }}
|
|
||||||
chart: {{ include "freedns-webhook.chart" . }}
|
|
||||||
release: {{ .Release.Name }}
|
|
||||||
heritage: {{ .Release.Service }}
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}:flowcontrol
|
|
||||||
subjects:
|
|
||||||
- apiGroup: ""
|
|
||||||
kind: ServiceAccount
|
|
||||||
name: {{ include "freedns-webhook.fullname" . }}
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
|
|||||||
Reference in New Issue
Block a user