diff --git a/charts/godaddy-webhook/0.2.0/templates/rbac.yaml b/charts/godaddy-webhook/0.2.0/templates/rbac.yaml index 2d0fa02..23f432b 100644 --- a/charts/godaddy-webhook/0.2.0/templates/rbac.yaml +++ b/charts/godaddy-webhook/0.2.0/templates/rbac.yaml @@ -103,3 +103,35 @@ rules: - 'secrets' verbs: - 'get' +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "godaddy-webhook.fullname" . }}:flowcontrol-solver + labels: +{{ include "godaddy-webhook.labels" . | indent 4 }} +rules: + - apiGroups: + - "flowcontrol.apiserver.k8s.io" + resources: + - "prioritylevelconfigurations" + - "flowschemas" + verbs: + - "list" + - "watch" +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ include "godaddy-webhook.fullname" . }}:flowcontrol-solver + labels: +{{ include "godaddy-webhook.labels" . | indent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ include "godaddy-webhook.fullname" . }}:flowcontrol-solver +subjects: + - apiGroup: "" + kind: ServiceAccount + name: godaddy-webhook + namespace: cert-manager