cw-infra-apps/vault-secrets-operator/templates/clusterrole-aggregated-viewer.yaml

22 lines
737 B
YAML

{{- /*
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1
*/ -}}
{{- if .Values.controller.rbac.clusterRoleAggregation.viewerRoles -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: {{ printf "%s-%s" (include "vso.chart.fullname" .) "aggregate-role-viewer" }}
labels:
app.kubernetes.io/component: rbac
vso.hashicorp.com/role-instance: aggregate-role-viewer
{{- if .Values.controller.rbac.clusterRoleAggregation.userFacingRoles.view }}
rbac.authorization.k8s.io/aggregate-to-view: "true"
{{- end -}}
{{- include "vso.chart.labels" . | nindent 4 }}
aggregationRule:
clusterRoleSelectors:
{{- include "vso.aggregateRoleMatchLabelsViewer" . | nindent 2 -}}
{{- end -}}