--- /dev/null
+{{- $root := . -}}
+{{- range append .Values.watchNamespaces .Release.Namespace }}
+{{- if ne . "*" -}}
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: RoleBinding
+metadata:
+ name: strimzi-cluster-operator-topic-operator-delegation
+ namespace: {{ . }}
+ labels:
+ app: {{ template "strimzi.name" $root }}
+ chart: {{ template "strimzi.chart" $root }}
+ component: topic-operator-role-binding
+ release: {{ $root.Release.Name }}
+ heritage: {{ $root.Release.Service }}
+subjects:
+ - kind: ServiceAccount
+ name: strimzi-cluster-operator
+ namespace: {{ $root.Release.Namespace }}
+roleRef:
+ kind: ClusterRole
+ name: strimzi-topic-operator
+ apiGroup: rbac.authorization.k8s.io
+{{- end }}
+{{- end }}