+++ /dev/null
-{{- if .Values.rbac.create }}
-
-{{- if .Values.gateway.enabled }}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: gloo-role-gateway
- labels:
- app: gloo
- gloo: rbac
-rules:
-- apiGroups: [""]
- resources: ["pods", "services", "secrets", "endpoints", "configmaps"]
- verbs: ["*"]
-- apiGroups: [""]
- resources: ["namespaces"]
- verbs: ["get", "list", "watch"]
-- apiGroups: ["apiextensions.k8s.io"]
- resources: ["customresourcedefinitions"]
- verbs: ["get", "create"]
-- apiGroups: ["gloo.solo.io"]
- resources: ["settings", "upstreams","upstreamgroups", "proxies","virtualservices"]
- verbs: ["*"]
-- apiGroups: ["gateway.solo.io"]
- resources: ["virtualservices", "gateways"]
- verbs: ["*"]
-{{- end -}}
-
-{{- end -}}