add webhook rbac

2026-10-13 08:52:23 +02:00
parent b137a7d10e
commit 0b007c3d62
1 changed files with 25 additions and 0 deletions
@@ -0,0 +1,25 @@
+# infrastructure/cert-manager/webhook-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cert-manager-webhook-duckdns-token-reader
+  namespace: cert-manager
+rules:
+- apiGroups: [""]
+  resources: ["secrets"]
+  resourceNames: ["duckdns-token"]
+  verbs: ["get"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: cert-manager-webhook-duckdns-token-reader
+  namespace: cert-manager
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: cert-manager-webhook-duckdns-token-reader
+subjects:
+- kind: ServiceAccount
+  name: cert-manager-webhook-duckdns
+  namespace: cert-manager