helm/infrastructure/subcharts/kong/templates/controller-rbac-role.yaml

   1 {{- if and .Values.ingressController.rbac.create .Values.ingressController.enabled -}}
   2 apiVersion: rbac.authorization.k8s.io/v1beta1
   3 kind: Role
   4 metadata:
   5   name:  {{ template "kong.fullname" . }}
   6   namespace: {{ .Release.namespace }}
   7   labels:
   8     app: {{ template "kong.name" . }}
   9     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
  10     release: "{{ .Release.Name }}"
  11     heritage: "{{ .Release.Service }}"
  12 rules:
  13   - apiGroups:
  14       - ""
  15     resources:
  16       - configmaps
  17       - pods
  18       - secrets
  19       - namespaces
  20     verbs:
  21       - get
  22   - apiGroups:
  23       - ""
  24     resources:
  25       - configmaps
  26     resourceNames:
  27       # Defaults to "<election-id>-<ingress-class>"
  28       # Here: "<kong-ingress-controller-leader-nginx>-<nginx>"
  29       # This has to be adapted if you change either parameter
  30       # when launching the nginx-ingress-controller.
  31       - "kong-ingress-controller-leader-{{ .Values.ingressController.ingressClass }}-{{ .Values.ingressController.ingressClass }}"
  32     verbs:
  33       - get
  34       - update
  35   - apiGroups:
  36       - ""
  37     resources:
  38       - configmaps
  39     verbs:
  40       - create
  41   - apiGroups:
  42       - ""
  43     resources:
  44       - endpoints
  45     verbs:
  46       - get
  47 {{- end -}}