19 lines
757 B
YAML
Raw Normal View History

{{- if and .Values.authentication.mutual.spire.enabled .Values.authentication.mutual.spire.install.enabled .Values.authentication.mutual.spire.install.server.serviceAccount.create -}}
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: {{ .Values.authentication.mutual.spire.install.server.serviceAccount.name }}
{{- with .Values.authentication.mutual.spire.annotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
roleRef:
kind: ClusterRole
name: spire-server
apiGroup: rbac.authorization.k8s.io
subjects:
- kind: ServiceAccount
name: {{ .Values.authentication.mutual.spire.install.server.serviceAccount.name }}
namespace: {{ .Values.authentication.mutual.spire.install.namespace }}
{{- end }}