1# Copyright 2022 Google LLC
2#
3# Licensed under the Apache License, Version 2.0 (the "License");
4# you may not use this file except in compliance with the License.
5# You may obtain a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS,
11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12# See the License for the specific language governing permissions and
13# limitations under the License.
14
15apiVersion: rbac.authorization.k8s.io/v1
16kind: ClusterRole
17metadata:
18 name: webhook-role
19rules:
20 - apiGroups:
21 - admissionregistration.k8s.io
22 resources:
23 - validatingwebhookconfigurations
24 - mutatingwebhookconfigurations
25 verbs:
26 - get
27 - list
28 - watch
29 - create
30 - update
31 - patch
32 - delete
33 - apiGroups:
34 - core.cnrm.cloud.google.com
35 resources:
36 - servicemappings
37 verbs:
38 - get
39 - list
40 - watch
41 - create
42 - update
43 - patch
44 - delete
45 - apiGroups:
46 - ""
47 resources:
48 - services
49 verbs:
50 - get
51 - list
52 - watch
53 - create
54 - update
55 - patch
56 - delete
57 - apiGroups:
58 - apiextensions.k8s.io
59 resources:
60 - customresourcedefinitions
61 verbs:
62 - get
63 - list
64 - watch
65 - apiGroups:
66 - ""
67 resources:
68 - namespaces
69 verbs:
70 - get
71 - list
72 - watchView as plain text