add webhook rbac

2026-10-13 08:52:23 +02:00
parent b137a7d10e
commit 0b007c3d62
1 changed files with 25 additions and 0 deletions
@@ -0,0 +1,25 @@
 # infrastructure/cert-manager/webhook-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
  name: cert-manager-webhook-duckdns-token-reader
  namespace: cert-manager
 rules:
 - apiGroups: [""]
  resources: ["secrets"]
  resourceNames: ["duckdns-token"]
  verbs: ["get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
  name: cert-manager-webhook-duckdns-token-reader
  namespace: cert-manager
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: cert-manager-webhook-duckdns-token-reader
 subjects:
 - kind: ServiceAccount
  name: cert-manager-webhook-duckdns
  namespace: cert-manager