--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: {{ include "softplayer-backend.fullname" . }} rules: - apiGroups: ["*"] resources: ["*"] verbs: ["*"] --- apiVersion: rbac.authorization.k8s.io/v1 # This cluster role binding allows anyone in the "manager" group to read secrets in any namespace. kind: ClusterRoleBinding metadata: name: {{ include "softplayer-backend.fullname" . }} subjects: - kind: ServiceAccount name: {{ include "softplayer-backend.serviceAccountName" . }} namespace: {{ .Release.Namespace }} roleRef: kind: ClusterRole name: {{ include "softplayer-backend.fullname" . }} apiGroup: rbac.authorization.k8s.io