kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: gitlab-cainjector
    selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/gitlab-cainjector
    uid: 98c5b80d-398b-11ea-b115-42010a8001d6
    resourceVersion: '2016192'
    creationTimestamp: '2020-01-18T00:43:51Z'
    labels:
        app: cainjector
        app.kubernetes.io/instance: gitlab
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/name: cainjector
        helm.sh/chart: cainjector-v0.10.1
rules:
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - certmanager.k8s.io
        resources:
            - certificates
    -
        verbs:
            - get
            - list
            - watch
        apiGroups:
            - ''
        resources:
            - secrets
    -
        verbs:
            - get
            - create
            - update
            - patch
        apiGroups:
            - ''
        resources:
            - configmaps
            - events
    -
        verbs:
            - get
            - list
            - watch
            - update
        apiGroups:
            - admissionregistration.k8s.io
        resources:
            - validatingwebhookconfigurations
            - mutatingwebhookconfigurations
    -
        verbs:
            - get
            - list
            - watch
            - update
        apiGroups:
            - apiregistration.k8s.io
        resources:
            - apiservices
    -
        verbs:
            - get
            - list
            - watch
            - update
        apiGroups:
            - apiextensions.k8s.io
        resources:
            - customresourcedefinitions

