1# GENERATED FILE: edits made by hand will not be preserved.
2---
3aggregationRule:
4 clusterRoleSelectors:
5 - matchLabels:
6 rbac.getambassador.io/role-group: {self.path.k8s}
7apiVersion: rbac.authorization.k8s.io/v1
8kind: ClusterRole
9metadata:
10 labels:
11 app.kubernetes.io/instance: kat-rbac-multinamespace
12 app.kubernetes.io/managed-by: kat
13 app.kubernetes.io/name: emissary-ingress
14 app.kubernetes.io/part-of: kat-rbac-multinamespace
15 product: aes
16 name: {self.path.k8s}
17rules: []
18---
19{serviceAccountExtra}
20apiVersion: v1
21kind: ServiceAccount
22metadata:
23 labels:
24 app.kubernetes.io/instance: kat-rbac-multinamespace
25 app.kubernetes.io/managed-by: kat
26 app.kubernetes.io/name: emissary-ingress
27 app.kubernetes.io/part-of: kat-rbac-multinamespace
28 product: aes
29 name: {self.path.k8s}
30 namespace: {self.namespace}
31---
32apiVersion: rbac.authorization.k8s.io/v1
33kind: ClusterRoleBinding
34metadata:
35 labels:
36 app.kubernetes.io/instance: kat-rbac-multinamespace
37 app.kubernetes.io/managed-by: kat
38 app.kubernetes.io/name: emissary-ingress
39 app.kubernetes.io/part-of: kat-rbac-multinamespace
40 product: aes
41 name: {self.path.k8s}
42roleRef:
43 apiGroup: rbac.authorization.k8s.io
44 kind: ClusterRole
45 name: {self.path.k8s}
46subjects:
47- kind: ServiceAccount
48 name: {self.path.k8s}
49 namespace: {self.namespace}
50---
51apiVersion: rbac.authorization.k8s.io/v1
52kind: ClusterRole
53metadata:
54 labels:
55 app.kubernetes.io/instance: kat-rbac-multinamespace
56 app.kubernetes.io/managed-by: kat
57 app.kubernetes.io/name: emissary-ingress
58 app.kubernetes.io/part-of: kat-rbac-multinamespace
59 product: aes
60 rbac.getambassador.io/role-group: {self.path.k8s}
61 name: {self.path.k8s}-crd
62rules:
63- apiGroups:
64 - apiextensions.k8s.io
65 resources:
66 - customresourcedefinitions
67 verbs:
68 - get
69 - list
70 - watch
71 - delete
72---
73apiVersion: rbac.authorization.k8s.io/v1
74kind: ClusterRole
75metadata:
76 labels:
77 app.kubernetes.io/instance: kat-rbac-multinamespace
78 app.kubernetes.io/managed-by: kat
79 app.kubernetes.io/name: emissary-ingress
80 app.kubernetes.io/part-of: kat-rbac-multinamespace
81 product: aes
82 rbac.getambassador.io/role-group: {self.path.k8s}
83 name: {self.path.k8s}-watch
84rules:
85- apiGroups:
86 - ""
87 resources:
88 - namespaces
89 - services
90 - secrets
91 - configmaps
92 - endpoints
93 verbs:
94 - get
95 - list
96 - watch
97- apiGroups:
98 - getambassador.io
99 resources:
100 - '*'
101 verbs:
102 - get
103 - list
104 - watch
105 - update
106 - patch
107 - create
108 - delete
109- apiGroups:
110 - getambassador.io
111 resources:
112 - mappings/status
113 verbs:
114 - update
115- apiGroups:
116 - networking.internal.knative.dev
117 resources:
118 - clusteringresses
119 - ingresses
120 verbs:
121 - get
122 - list
123 - watch
124- apiGroups:
125 - networking.x-k8s.io
126 resources:
127 - '*'
128 verbs:
129 - get
130 - list
131 - watch
132- apiGroups:
133 - networking.internal.knative.dev
134 resources:
135 - ingresses/status
136 - clusteringresses/status
137 verbs:
138 - update
139- apiGroups:
140 - extensions
141 - networking.k8s.io
142 resources:
143 - ingresses
144 - ingressclasses
145 verbs:
146 - get
147 - list
148 - watch
149- apiGroups:
150 - extensions
151 - networking.k8s.io
152 resources:
153 - ingresses/status
154 verbs:
155 - update
View as plain text