1 {{- if and .Values.ingressController.rbac.create .Values.ingressController.enabled -}}
2 apiVersion: rbac.authorization.k8s.io/v1beta1
5 name: {{ template "kong.fullname" . }}
6 namespace: {{ .Release.namespace }}
8 {{- include "kong.metaLabels" . | nindent 4 }}
24 # Defaults to "<election-id>-<ingress-class>"
25 # Here: "<kong-ingress-controller-leader-nginx>-<nginx>"
26 # This has to be adapted if you change either parameter
27 # when launching the nginx-ingress-controller.
28 - "kong-ingress-controller-leader-{{ .Values.ingressController.ingressClass }}-{{ .Values.ingressController.ingressClass }}"
45 apiVersion: rbac.authorization.k8s.io/v1beta1
48 name: {{ template "kong.fullname" . }}
49 namespace: {{ .Release.Namespace }}
51 {{- include "kong.metaLabels" . | nindent 4 }}
53 apiGroup: rbac.authorization.k8s.io
55 name: {{ template "kong.fullname" . }}
57 - kind: ServiceAccount
58 name: {{ template "kong.serviceAccountName" . }}
59 namespace: {{ .Release.Namespace }}
61 apiVersion: rbac.authorization.k8s.io/v1beta1
65 {{- include "kong.metaLabels" . | nindent 4 }}
66 name: {{ template "kong.fullname" . }}
110 - "networking.k8s.io"
116 - "configuration.konghq.com"
127 apiVersion: rbac.authorization.k8s.io/v1beta1
128 kind: ClusterRoleBinding
130 name: {{ template "kong.fullname" . }}
132 {{- include "kong.metaLabels" . | nindent 4 }}
134 apiGroup: rbac.authorization.k8s.io
136 name: {{ template "kong.fullname" . }}
138 - kind: ServiceAccount
139 name: {{ template "kong.serviceAccountName" . }}
140 namespace: {{ .Release.Namespace }}