postdeploy/helm/externaldns/templates/clusterrolebinding.yaml (14 lines of code) (raw):
{{- $clbname := include "app.fullname" . -}}
{{- $svcPort := .Values.service.port -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: {{ $clbname }}-viewer
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ include "app.serviceAccountName" . }}
subjects:
- kind: ServiceAccount
name: {{ include "app.serviceAccountName" . }}
namespace: default