21 lines
613 B
YAML
21 lines
613 B
YAML
|
---
|
||
|
# Grant the webhook permission to read the ConfigMap containing the Kubernetes
|
||
|
# apiserver's requestheader-ca-certificate.
|
||
|
# This ConfigMap is automatically created by the Kubernetes apiserver.
|
||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
kind: RoleBinding
|
||
|
metadata:
|
||
|
name: webhook-dnsimple:webhook-authentication-reader
|
||
|
namespace: kube-system
|
||
|
labels:
|
||
|
app: cert-manager-webhook-dnsimple
|
||
|
roleRef:
|
||
|
apiGroup: rbac.authorization.k8s.io
|
||
|
kind: Role
|
||
|
name: extension-apiserver-authentication-reader
|
||
|
subjects:
|
||
|
- apiGroup: ""
|
||
|
kind: ServiceAccount
|
||
|
name: webhook-dnsimple
|
||
|
namespace: cert-manager
|