---
# Source: origin-ca-issuer/templates/issuer-clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: default-origin-ca-issuer-controller
  labels:
    app: origin-ca-issuer
    app.kubernetes.io/name: origin-ca-issuer
    app.kubernetes.io/instance: default
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: 'controller'
    helm.sh/chart: origin-ca-issuer-0.5.0
rules:
  - apiGroups: ['']
    resources: ['events']
    verbs: ['create', 'patch']
  - apiGroups: ['']
    resources: ['secrets']
    verbs: ['get', 'list', 'watch']
  - apiGroups: ['cert-manager.io']
    resources: ['certificaterequests']
    verbs: ['get', 'list', 'update', 'watch']
  - apiGroups: ['cert-manager.io']
    resources: ['certificaterequests/status']
    verbs: ['get', 'patch', 'update']
  - apiGroups: ['cert-manager.k8s.cloudflare.com']
    resources: ['originissuers']
    verbs: ['create', 'get', 'list', 'watch']
  - apiGroups: ['cert-manager.k8s.cloudflare.com']
    resources: ['originissuers/status']
    verbs: ['get', 'patch', 'update']
