rancher-partner-charts/charts/codefresh/cf-runtime/0.1.401/templates/app-proxy/role-binding.app-proxy.yaml

17 lines
534 B
YAML

{{ if .Values.appProxy.enabled }}
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: {{ include "cf-app-proxy.fullname" . }}
labels: {{- include "cf-app-proxy.labels" . | nindent 4 }}
subjects:
- kind: ServiceAccount
name: {{ include "cf-app-proxy.fullname" . }} # this service account can get secrets cluster-wide (all namespaces)
namespace: {{ .Release.Namespace }}
roleRef:
kind: ClusterRole
name: {{ include "cf-app-proxy.fullname" . }}
apiGroup: rbac.authorization.k8s.io
{{ end }}