apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
    labels:
        app: cainjector
        app.kubernetes.io/component: cainjector
        app.kubernetes.io/instance: cert-manager
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/name: cainjector
        helm.sh/chart: cert-manager-v1.4.0
    name: cert-manager-cainjector
rules:
    - apiGroups:
        - cert-manager.io
      resources:
        - certificates
      verbs:
        - get
        - list
        - watch
    - apiGroups:
        - ""
      resources:
        - secrets
      verbs:
        - get
        - list
        - watch
    - apiGroups:
        - ""
      resources:
        - events
      verbs:
        - get
        - create
        - update
        - patch
    - apiGroups:
        - admissionregistration.k8s.io
      resources:
        - validatingwebhookconfigurations
        - mutatingwebhookconfigurations
      verbs:
        - get
        - list
        - watch
        - update
    - apiGroups:
        - apiregistration.k8s.io
      resources:
        - apiservices
      verbs:
        - get
        - list
        - watch
        - update
    - apiGroups:
        - apiextensions.k8s.io
      resources:
        - customresourcedefinitions
      verbs:
        - get
        - list
        - watch
        - update
    - apiGroups:
        - auditregistration.k8s.io
      resources:
        - auditsinks
      verbs:
        - get
        - list
        - watch
        - update