mirror of https://git.rancher.io/charts
44 lines
910 B
YAML
44 lines
910 B
YAML
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
||
|
|
name: istio-admin
|
||
|
|
namespace: {{ template "istio.namespace" . }}
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- config.istio.io
|
||
|
|
resources:
|
||
|
|
- adapters
|
||
|
|
- attributemanifests
|
||
|
|
- handlers
|
||
|
|
- httpapispecbindings
|
||
|
|
- httpapispecs
|
||
|
|
- instances
|
||
|
|
- quotaspecbindings
|
||
|
|
- quotaspecs
|
||
|
|
- rules
|
||
|
|
- templates
|
||
|
|
verbs: ["get", "watch", "list"]
|
||
|
|
- apiGroups:
|
||
|
|
- networking.istio.io
|
||
|
|
resources:
|
||
|
|
- destinationrules
|
||
|
|
- envoyfilters
|
||
|
|
- gateways
|
||
|
|
- serviceentries
|
||
|
|
- sidecars
|
||
|
|
- virtualservices
|
||
|
|
- workloadentries
|
||
|
|
verbs:
|
||
|
|
- '*'
|
||
|
|
- apiGroups:
|
||
|
|
- security.istio.io
|
||
|
|
resources:
|
||
|
|
- authorizationpolicies
|
||
|
|
- peerauthentications
|
||
|
|
- requestauthentications
|
||
|
|
verbs:
|
||
|
|
- '*'
|