kubezero/containers/admin/v1.21/kubeadm/templates/resources/20-oicd-public-rbac.yaml

14 lines
324 B
YAML

{{- if .Values.api.serviceAccountIssuer }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: oidc-public
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:service-account-issuer-discovery
subjects:
- kind: Group
name: system:unauthenticated
{{- end }}