1 {{- if .Values.rbac.create }}
2 apiVersion: rbac.authorization.k8s.io/v1
5 name: {{ include "sparkoperator.fullname" . }}-cr
7 app.kubernetes.io/name: {{ include "sparkoperator.name" . }}
8 helm.sh/chart: {{ include "sparkoperator.chart" . }}
9 app.kubernetes.io/instance: {{ .Release.Name }}
10 app.kubernetes.io/managed-by: {{ .Release.Service }}
16 resources: ["services", "configmaps", "secrets"]
17 verbs: ["create", "get", "delete"]
18 - apiGroups: ["extensions"]
19 resources: ["ingresses"]
20 verbs: ["create", "get", "delete"]
26 verbs: ["create", "update", "patch"]
27 - apiGroups: ["apiextensions.k8s.io"]
28 resources: ["customresourcedefinitions"]
29 verbs: ["create", "get", "update", "delete"]
30 - apiGroups: ["admissionregistration.k8s.io"]
31 resources: ["mutatingwebhookconfigurations"]
32 verbs: ["create", "get", "update", "delete"]
33 - apiGroups: ["sparkoperator.k8s.io"]
34 resources: ["sparkapplications", "scheduledsparkapplications"]
37 apiVersion: rbac.authorization.k8s.io/v1
38 kind: ClusterRoleBinding
40 name: {{ include "sparkoperator.fullname" . }}-crb
41 namespace: {{ .Release.Namespace }}
43 app.kubernetes.io/name: {{ include "sparkoperator.name" . }}
44 helm.sh/chart: {{ include "sparkoperator.chart" . }}
45 app.kubernetes.io/instance: {{ .Release.Name }}
46 app.kubernetes.io/managed-by: {{ .Release.Service }}
48 - kind: ServiceAccount
49 name: {{ include "sparkoperator.serviceAccountName" . }}
50 namespace: {{ .Release.Namespace }}
53 name: {{ include "sparkoperator.fullname" . }}-cr
54 apiGroup: rbac.authorization.k8s.io