| {{- if and .Values.rbac.create (not .Values.rbac.scope) -}} |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRoleBinding |
| metadata: |
| labels: |
| {{- include "ingress-nginx.labels" . | nindent 4 }} |
| {{- with .Values.controller.labels }} |
| {{- toYaml . | nindent 4 }} |
| {{- end }} |
| name: {{ include "ingress-nginx.fullname" . }} |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: {{ include "ingress-nginx.fullname" . }} |
| subjects: |
| - kind: ServiceAccount |
| name: {{ template "ingress-nginx.serviceAccountName" . }} |
| namespace: {{ include "ingress-nginx.namespace" . }} |
| {{- end }} |