{{with .Values -}} --- ### ### Service Profile Validator Config ### --- kind: ServiceAccount apiVersion: v1 metadata: name: linkerd-sp-validator namespace: {{.Namespace}} --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: linkerd-{{.Namespace}}-sp-validator rules: - apiGroups: [""] resources: ["pods"] verbs: ["list"] - apiGroups: ["admissionregistration.k8s.io"] resources: ["validatingwebhookconfigurations"] verbs: ["create", "get", "delete"] --- kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: linkerd-{{.Namespace}}-sp-validator subjects: - kind: ServiceAccount name: linkerd-sp-validator namespace: {{.Namespace}} apiGroup: "" roleRef: kind: ClusterRole name: linkerd-{{.Namespace}}-sp-validator apiGroup: rbac.authorization.k8s.io {{end -}}