Skip to content
This repository was archived by the owner on Mar 24, 2023. It is now read-only.

Commit 93879b9

Browse files
authored
Merge pull request #876 from laverya/multidoc-yaml-crds
Multidoc yaml crds
2 parents 835c04d + 4ee3977 commit 93879b9

33 files changed

+3355
-76
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
{
2+
"v1": {
3+
"config": {},
4+
"releaseName": "ship",
5+
"upstream": "https://github.com/jetstack/cert-manager/blob/208009151b40a0f82e2f27df7e639996b1529868/deploy/manifests/cert-manager.yaml",
6+
"contentSHA": "17734bef6ffddfd157722aa1bf0bf56e0457bcd2470cab40900a5bb43554de06"
7+
}
8+
}
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
apiVersion: apiregistration.k8s.io/v1beta1
2+
kind: APIService
3+
metadata:
4+
annotations:
5+
certmanager.k8s.io/inject-ca-from: cert-manager/cert-manager-webhook-webhook-tls
6+
labels:
7+
app: webhook
8+
chart: webhook-v0.7.0
9+
heritage: Tiller
10+
release: cert-manager
11+
name: v1beta1.admission.certmanager.k8s.io
12+
spec:
13+
group: admission.certmanager.k8s.io
14+
groupPriorityMinimum: 1000
15+
service:
16+
name: cert-manager-webhook
17+
namespace: cert-manager
18+
version: v1beta1
19+
versionPriority: 15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: certmanager.k8s.io/v1alpha1
2+
kind: Certificate
3+
metadata:
4+
labels:
5+
app: webhook
6+
chart: webhook-v0.7.0
7+
heritage: Tiller
8+
release: cert-manager
9+
name: cert-manager-webhook-ca
10+
namespace: cert-manager
11+
spec:
12+
commonName: ca.webhook.cert-manager
13+
duration: 43800h
14+
isCA: true
15+
issuerRef:
16+
name: cert-manager-webhook-selfsign
17+
secretName: cert-manager-webhook-ca
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
apiVersion: certmanager.k8s.io/v1alpha1
2+
kind: Certificate
3+
metadata:
4+
labels:
5+
app: webhook
6+
chart: webhook-v0.7.0
7+
heritage: Tiller
8+
release: cert-manager
9+
name: cert-manager-webhook-webhook-tls
10+
namespace: cert-manager
11+
spec:
12+
dnsNames:
13+
- cert-manager-webhook
14+
- cert-manager-webhook.cert-manager
15+
- cert-manager-webhook.cert-manager.svc
16+
duration: 8760h
17+
issuerRef:
18+
name: cert-manager-webhook-ca
19+
secretName: cert-manager-webhook-webhook-tls
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
apiVersion: rbac.authorization.k8s.io/v1beta1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
app: cainjector
6+
release: cert-manager
7+
name: cert-manager-cainjector
8+
rules:
9+
- apiGroups:
10+
- certmanager.k8s.io
11+
resources:
12+
- certificates
13+
verbs:
14+
- get
15+
- list
16+
- watch
17+
- apiGroups:
18+
- ""
19+
resources:
20+
- secrets
21+
verbs:
22+
- get
23+
- list
24+
- watch
25+
- apiGroups:
26+
- ""
27+
resources:
28+
- configmaps
29+
- events
30+
verbs:
31+
- '*'
32+
- apiGroups:
33+
- admissionregistration.k8s.io
34+
resources:
35+
- validatingwebhookconfigurations
36+
- mutatingwebhookconfigurations
37+
verbs:
38+
- '*'
39+
- apiGroups:
40+
- apiregistration.k8s.io
41+
resources:
42+
- apiservices
43+
verbs:
44+
- '*'
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
app: cert-manager
6+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
7+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
8+
release: cert-manager
9+
name: cert-manager-edit
10+
rules:
11+
- apiGroups:
12+
- certmanager.k8s.io
13+
resources:
14+
- certificates
15+
- issuers
16+
verbs:
17+
- create
18+
- delete
19+
- deletecollection
20+
- patch
21+
- update
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
app: cert-manager
6+
rbac.authorization.k8s.io/aggregate-to-admin: "true"
7+
rbac.authorization.k8s.io/aggregate-to-edit: "true"
8+
rbac.authorization.k8s.io/aggregate-to-view: "true"
9+
release: cert-manager
10+
name: cert-manager-view
11+
rules:
12+
- apiGroups:
13+
- certmanager.k8s.io
14+
resources:
15+
- certificates
16+
- issuers
17+
verbs:
18+
- get
19+
- list
20+
- watch
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
app: webhook
6+
release: cert-manager
7+
name: cert-manager-webhook:webhook-requester
8+
rules:
9+
- apiGroups:
10+
- admission.certmanager.k8s.io
11+
resources:
12+
- certificates
13+
- issuers
14+
- clusterissuers
15+
verbs:
16+
- create
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
apiVersion: rbac.authorization.k8s.io/v1beta1
2+
kind: ClusterRole
3+
metadata:
4+
labels:
5+
app: cert-manager
6+
release: cert-manager
7+
name: cert-manager
8+
rules:
9+
- apiGroups:
10+
- certmanager.k8s.io
11+
resources:
12+
- certificates
13+
- certificates/finalizers
14+
- issuers
15+
- clusterissuers
16+
- orders
17+
- orders/finalizers
18+
- challenges
19+
verbs:
20+
- '*'
21+
- apiGroups:
22+
- ""
23+
resources:
24+
- configmaps
25+
- secrets
26+
- events
27+
- services
28+
- pods
29+
verbs:
30+
- '*'
31+
- apiGroups:
32+
- extensions
33+
resources:
34+
- ingresses
35+
verbs:
36+
- '*'
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
apiVersion: rbac.authorization.k8s.io/v1beta1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
labels:
5+
app: cainjector
6+
release: cert-manager
7+
name: cert-manager-cainjector
8+
roleRef:
9+
apiGroup: rbac.authorization.k8s.io
10+
kind: ClusterRole
11+
name: cert-manager-cainjector
12+
subjects:
13+
- kind: ServiceAccount
14+
name: cert-manager-cainjector
15+
namespace: cert-manager
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
apiVersion: rbac.authorization.k8s.io/v1beta1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
labels:
5+
app: webhook
6+
release: cert-manager
7+
name: cert-manager-webhook:auth-delegator
8+
roleRef:
9+
apiGroup: rbac.authorization.k8s.io
10+
kind: ClusterRole
11+
name: system:auth-delegator
12+
subjects:
13+
- apiGroup: ""
14+
kind: ServiceAccount
15+
name: cert-manager-webhook
16+
namespace: cert-manager
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
apiVersion: rbac.authorization.k8s.io/v1beta1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
labels:
5+
app: cert-manager
6+
release: cert-manager
7+
name: cert-manager
8+
roleRef:
9+
apiGroup: rbac.authorization.k8s.io
10+
kind: ClusterRole
11+
name: cert-manager
12+
subjects:
13+
- kind: ServiceAccount
14+
name: cert-manager
15+
namespace: cert-manager

0 commit comments

Comments
 (0)