apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: emissary-ingress-apiext
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
    rbac.getambassador.io/role-group: emissary-ingress
rules:
- resources:
  - deployments
  apiGroups:
  - apps
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: emissary-ingress-apiext
  labels:
    app.kubernetes.io/instance: emissary-ingress
    app.kubernetes.io/managed-by: getambassador.io
    app.kubernetes.io/name: emissary-ingress
    app.kubernetes.io/part-of: emissary-ingress
    product: aes
roleRef:
  name: emissary-ingress-apiext
  kind: Role
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: emissary-ingress
  namespace: emissary
  kind: ServiceAccount