1 {{- if .Values.rbac.enabled }}
5 name: {{ include "istio-operator.fullname" . }}-operator
7 app.kubernetes.io/name: {{ include "istio-operator.name" . }}
8 helm.sh/chart: {{ include "istio-operator.chart" . }}
9 app.kubernetes.io/instance: {{ .Release.Name }}
10 app.kubernetes.io/managed-by: {{ .Release.Service }}
11 app.kubernetes.io/version: {{ .Chart.AppVersion }}
12 app.kubernetes.io/component: operator
14 apiVersion: rbac.authorization.k8s.io/v1
17 name: {{ include "istio-operator.fullname" . }}-operator
19 app.kubernetes.io/name: {{ include "istio-operator.name" . }}
20 helm.sh/chart: {{ include "istio-operator.chart" . }}
21 app.kubernetes.io/instance: {{ .Release.Name }}
22 app.kubernetes.io/managed-by: {{ .Release.Service }}
23 app.kubernetes.io/version: {{ .Chart.AppVersion }}
24 app.kubernetes.io/component: operator
33 - replicationcontrollers
109 - deployments/finalizers
123 - poddisruptionbudgets
135 - horizontalpodautoscalers
145 - apiextensions.k8s.io
147 - customresourcedefinitions
151 - rbac.authorization.k8s.io
154 - clusterrolebindings
167 - authentication.k8s.io
173 - istio.banzaicloud.io
185 - istio.banzaicloud.io
193 - authentication.istio.io
197 - networking.istio.io
199 - scalingpolicy.istio.io
225 - istio.banzaicloud.io
237 - istio.banzaicloud.io
239 - remoteistios/status
245 - admissionregistration.k8s.io
247 - validatingwebhookconfigurations
257 - istio.banzaicloud.io
265 - admissionregistration.k8s.io
267 - mutatingwebhookconfigurations
268 - validatingwebhookconfigurations
296 apiVersion: rbac.authorization.k8s.io/v1
297 kind: ClusterRoleBinding
299 name: {{ include "istio-operator.fullname" . }}-operator
301 app.kubernetes.io/name: {{ include "istio-operator.name" . }}
302 helm.sh/chart: {{ include "istio-operator.chart" . }}
303 app.kubernetes.io/instance: {{ .Release.Name }}
304 app.kubernetes.io/managed-by: {{ .Release.Service }}
305 app.kubernetes.io/version: {{ .Chart.AppVersion }}
306 app.kubernetes.io/component: operator
308 apiGroup: rbac.authorization.k8s.io
310 name: {{ include "istio-operator.fullname" . }}-operator
312 - kind: ServiceAccount
313 name: {{ include "istio-operator.fullname" . }}-operator
314 namespace: {{ .Release.Namespace }}