constellation/internal/helm/charts/cilium/templates/spire/server/clusterrolebinding.yaml
Moritz Sanft 968cdc1a38
cli: move cli/internal libraries (#2623)
* cli: move internal packages

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

* cli: fix buildfiles

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

* bazel: fix exclude dir

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

* cli: move back libraries that will not be used by TF provider

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

---------

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2023-11-22 14:52:56 +01:00

19 lines
757 B
YAML

{{- if and .Values.authentication.mutual.spire.enabled .Values.authentication.mutual.spire.install.enabled .Values.authentication.mutual.spire.install.server.serviceAccount.create -}}
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: {{ .Values.authentication.mutual.spire.install.server.serviceAccount.name }}
{{- with .Values.authentication.mutual.spire.annotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
roleRef:
kind: ClusterRole
name: spire-server
apiGroup: rbac.authorization.k8s.io
subjects:
- kind: ServiceAccount
name: {{ .Values.authentication.mutual.spire.install.server.serviceAccount.name }}
namespace: {{ .Values.authentication.mutual.spire.install.namespace }}
{{- end }}