yurt-manager-auto-generated.yaml

# ---------------------------------------------------
#
# Manifest generated by controller-gen. DO NOT EDIT !!!
# You can view the "make manifests" command in Makefile
#
# ---------------------------------------------------

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-csr-approver-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-daemon-pod-updater-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-delegate-lease-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-gateway-dns-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-gateway-internal-service-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-gateway-pickup-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-gateway-public-service-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-load-balancer-set-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-node-bucket-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-node-life-cycle-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-nodepool-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-platform-admin-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-pod-binding-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-service-topology-endpoints-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-service-topology-endpointslice-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-yurt-app-daemon-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-yurt-app-overrider-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-yurt-app-set-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-yurt-coordinator-cert-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: yurt-manager-yurt-static-set-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: yurt-manager-webhook
  namespace: {{ .Release.Namespace }}
rules:
- apiGroups:
  - ""
  resourceNames:
  - yurt-manager-webhook-certs
  resources:
  - secrets
  verbs:
  - get
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-basecontroller
rules:
- apiGroups:
  - apps
  resources:
  - controllerrevisions
  verbs:
  - list
  - watch
- apiGroups:
  - apps
  resources:
  - daemonsets
  verbs:
  - list
  - watch
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - list
  - watch
- apiGroups:
  - apps
  resources:
  - statefulsets
  verbs:
  - list
  - watch
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodebuckets
  verbs:
  - list
  - watch
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodepools
  verbs:
  - list
  - watch
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappdaemons
  verbs:
  - list
  - watch
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappoverriders
  verbs:
  - list
  - watch
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappsets
  verbs:
  - list
  - watch
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtstaticsets
  verbs:
  - list
  - watch
- apiGroups:
  - authentication.k8s.io
  resources:
  - tokenreviews
  verbs:
  - create
- apiGroups:
  - certificates.k8s.io
  resources:
  - certificatesigningrequests
  verbs:
  - list
  - watch
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - endpoints
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - ""
  resources:
  - namespaces
  verbs:
  - create
  - get
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - list
  - watch
- apiGroups:
  - ""
  resources:
  - serviceaccounts
  verbs:
  - create
  - get
- apiGroups:
  - ""
  resources:
  - serviceaccounts/token
  verbs:
  - create
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - list
  - watch
- apiGroups:
  - crd.projectcalico.org
  resources:
  - blockaffinities
  verbs:
  - list
  - watch
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch
- apiGroups:
  - iot.openyurt.io
  resources:
  - platformadmins
  verbs:
  - list
  - watch
- apiGroups:
  - network.openyurt.io
  resources:
  - poolservices
  verbs:
  - list
  - watch
- apiGroups:
  - raven.openyurt.io
  resources:
  - gateways
  verbs:
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-csr-approver-controller
rules:
- apiGroups:
  - certificates.k8s.io
  resources:
  - certificatesigningrequests
  verbs:
  - get
- apiGroups:
  - certificates.k8s.io
  resources:
  - certificatesigningrequests/approval
  verbs:
  - update
- apiGroups:
  - certificates.k8s.io
  resourceNames:
  - kubernetes.io/kube-apiserver-client
  - kubernetes.io/kubelet-serving
  resources:
  - signers
  verbs:
  - approve
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-daemon-pod-updater-controller
rules:
- apiGroups:
  - apps
  resources:
  - daemonsets
  verbs:
  - get
  - update
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - delete
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-delegate-lease-controller
rules:
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-gateway-dns-controller
rules:
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodepools
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - create
  - delete
  - get
  - update
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-gateway-internal-service-controller
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - endpoints
  verbs:
  - create
  - delete
  - get
  - update
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - create
  - delete
  - get
  - update
- apiGroups:
  - raven.openyurt.io
  resources:
  - gateways
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-gateway-pickup-controller
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - crd.projectcalico.org
  resources:
  - blockaffinities
  verbs:
  - get
- apiGroups:
  - raven.openyurt.io
  resources:
  - gateways
  verbs:
  - create
  - delete
  - get
  - update
- apiGroups:
  - raven.openyurt.io
  resources:
  - gateways/finalizers
  verbs:
  - update
- apiGroups:
  - raven.openyurt.io
  resources:
  - gateways/status
  verbs:
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-gateway-public-service-controller
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - endpoints
  verbs:
  - create
  - delete
  - get
  - update
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - create
  - delete
  - get
  - update
- apiGroups:
  - raven.openyurt.io
  resources:
  - gateways
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-load-balancer-set-controller
rules:
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
  - update
- apiGroups:
  - ""
  resources:
  - services/status
  verbs:
  - update
- apiGroups:
  - network.openyurt.io
  resources:
  - poolservices
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - network.openyurt.io
  resources:
  - poolservices/status
  verbs:
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-node-bucket-controller
rules:
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodebuckets
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodepools
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-node-life-cycle-controller
rules:
- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
  - patch
- apiGroups:
  - ""
  resources:
  - nodes/status
  verbs:
  - update
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - delete
  - get
- apiGroups:
  - ""
  resources:
  - pods/status
  verbs:
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-nodepool-controller
rules:
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodepools
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodepools/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-platform-admin-controller
rules:
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappsets
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappsets/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - configmaps/status
  verbs:
  - get
  - patch
  - update
  - watch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - services/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - iot.openyurt.io
  resources:
  - platformadmins
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - iot.openyurt.io
  resources:
  - platformadmins/finalizers
  verbs:
  - update
- apiGroups:
  - iot.openyurt.io
  resources:
  - platformadmins/status
  verbs:
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-pod-binding-controller
rules:
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - get
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-service-topology-endpoints-controller
rules:
- apiGroups:
  - ""
  resources:
  - endpoints
  verbs:
  - get
  - patch
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-service-topology-endpointslice-controller
rules:
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - get
  - patch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-webhook
rules:
- apiGroups:
  - admissionregistration.k8s.io
  resources:
  - mutatingwebhookconfigurations
  verbs:
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - admissionregistration.k8s.io
  resources:
  - validatingwebhookconfigurations
  verbs:
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - apiextensions.k8s.io
  resources:
  - customresourcedefinitions
  verbs:
  - get
  - list
  - patch
  - update
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-yurt-app-daemon-controller
rules:
- apiGroups:
  - apps
  resources:
  - controllerrevisions
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps
  resources:
  - deployments/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappdaemons
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappdaemons/status
  verbs:
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-yurt-app-overrider-controller
rules:
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappdaemons
  verbs:
  - get
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappoverriders
  verbs:
  - get
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappsets
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-yurt-app-set-controller
rules:
- apiGroups:
  - apps
  resources:
  - controllerrevisions
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps
  resources:
  - deployments
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps
  resources:
  - deployments/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - apps
  resources:
  - statefulsets
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps
  resources:
  - statefulsets/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - nodepools
  verbs:
  - get
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappsets
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtappsets/status
  verbs:
  - get
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-yurt-coordinator-cert-controller
rules:
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - secrets
  verbs:
  - create
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - services
  verbs:
  - get
- apiGroups:
  - certificates.k8s.io
  resources:
  - certificatesigningrequests
  verbs:
  - create
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: yurt-manager-yurt-static-set-controller
rules:
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtstaticsets
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtstaticsets/finalizers
  verbs:
  - update
- apiGroups:
  - apps.openyurt.io
  resources:
  - yurtstaticsets/status
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - configmaps
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - nodes
  verbs:
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- apiGroups:
  - ""
  resources:
  - pods/status
  verbs:
  - patch
  - update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-csr-approver-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-csr-approver-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-csr-approver-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-daemon-pod-updater-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-daemon-pod-updater-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-daemon-pod-updater-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-delegate-lease-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-delegate-lease-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-delegate-lease-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-gateway-dns-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-gateway-dns-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-gateway-dns-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-gateway-internal-service-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-gateway-internal-service-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-gateway-internal-service-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-gateway-pickup-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-gateway-pickup-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-gateway-pickup-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-gateway-public-service-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-gateway-public-service-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-gateway-public-service-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-load-balancer-set-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-load-balancer-set-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-load-balancer-set-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-node-bucket-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-node-bucket-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-node-bucket-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-node-life-cycle-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-node-life-cycle-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-node-life-cycle-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-nodepool-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-nodepool-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-nodepool-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-platform-admin-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-platform-admin-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-platform-admin-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-pod-binding-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-pod-binding-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-pod-binding-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-service-topology-endpoints-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-service-topology-endpoints-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-service-topology-endpoints-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-service-topology-endpointslice-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-service-topology-endpointslice-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-service-topology-endpointslice-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-yurt-app-daemon-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-yurt-app-daemon-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-yurt-app-daemon-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-yurt-app-overrider-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-yurt-app-overrider-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-yurt-app-overrider-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-yurt-app-set-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-yurt-app-set-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-yurt-app-set-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-yurt-coordinator-cert-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-yurt-coordinator-cert-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-yurt-coordinator-cert-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: yurt-manager-yurt-static-set-controller-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: yurt-manager-yurt-static-set-controller
subjects:
- kind: ServiceAccount
  name: yurt-manager-yurt-static-set-controller
  namespace: {{ .Release.Namespace }}
---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  name: yurt-manager-mutating-webhook-configuration
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-apps-v1-deployment
  failurePolicy: Ignore
  name: mutate.apps.v1.deployment
  rules:
  - apiGroups:
    - apps
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - deployments
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-raven-openyurt-io-v1beta1-gateway
  failurePolicy: Fail
  name: mutate.gateway.v1beta1.raven.openyurt.io
  rules:
  - apiGroups:
    - raven.openyurt.io
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - gateways
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-core-openyurt-io-v1-node
  failurePolicy: Ignore
  name: mutate.core.v1.node.openyurt.io
  rules:
  - apiGroups:
    - ""
    apiVersions:
    - v1
    operations:
    - CREATE
    - UPDATE
    resources:
    - nodes
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-apps-openyurt-io-v1beta1-nodepool
  failurePolicy: Fail
  name: m.v1beta1.nodepool.kb.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    resources:
    - nodepools
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-iot-openyurt-io-v1alpha2-platformadmin
  failurePolicy: Fail
  name: mplatformadmin.kb.io
  rules:
  - apiGroups:
    - iot.openyurt.io
    apiVersions:
    - v1alpha2
    operations:
    - CREATE
    - UPDATE
    resources:
    - platformadmins
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-core-openyurt-io-v1-pod
  failurePolicy: Ignore
  name: mutate.core.v1.pod.openyurt.io
  rules:
  - apiGroups:
    - ""
    apiVersions:
    - v1
    operations:
    - CREATE
    resources:
    - pods
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-apps-openyurt-io-v1alpha1-yurtappdaemon
  failurePolicy: Fail
  name: mutate.apps.v1alpha1.yurtappdaemon.openyurt.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1alpha1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtappdaemons
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-apps-openyurt-io-v1alpha1-yurtappoverrider
  failurePolicy: Fail
  name: mutate.apps.v1alpha1.yurtappoverrider.openyurt.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1alpha1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtappoverriders
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-apps-openyurt-io-v1beta1-yurtappset
  failurePolicy: Fail
  name: myurtappset.kb.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtappsets
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /mutate-apps-openyurt-io-v1alpha1-yurtstaticset
  failurePolicy: Fail
  name: mutate.apps.v1alpha1.yurtstaticset.openyurt.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1alpha1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtstaticsets
  sideEffects: None
---
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
  name: yurt-manager-validating-webhook-configuration
webhooks:
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-raven-openyurt-io-v1beta1-gateway
  failurePolicy: Fail
  name: validate.gateway.v1beta1.raven.openyurt.io
  rules:
  - apiGroups:
    - raven.openyurt.io
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - gateways
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-core-openyurt-io-v1-node
  failurePolicy: Ignore
  name: validate.core.v1.node.openyurt.io
  rules:
  - apiGroups:
    - ""
    apiVersions:
    - v1
    operations:
    - UPDATE
    resources:
    - nodes
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-apps-openyurt-io-v1beta1-nodepool
  failurePolicy: Fail
  name: v.v1beta1.nodepool.kb.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    - DELETE
    resources:
    - nodepools
  sideEffects: None
- admissionReviewVersions:
  - v1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-iot-openyurt-io-v1alpha2-platformadmin
  failurePolicy: Fail
  name: vplatformadmin.kb.io
  rules:
  - apiGroups:
    - iot.openyurt.io
    apiVersions:
    - v1alpha2
    operations:
    - CREATE
    - UPDATE
    resources:
    - platformadmins
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-apps-openyurt-io-v1alpha1-yurtappdaemon
  failurePolicy: Fail
  name: validate.apps.v1alpha1.yurtappdaemon.openyurt.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1alpha1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtappdaemons
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-apps-openyurt-io-v1alpha1-yurtappoverrider
  failurePolicy: Fail
  name: validate.apps.v1alpha1.yurtappoverrider.openyurt.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1alpha1
    operations:
    - CREATE
    - UPDATE
    - DELETE
    resources:
    - yurtappoverriders
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-apps-openyurt-io-v1beta1-yurtappset
  failurePolicy: Fail
  name: vyurtappset.kb.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1beta1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtappsets
  sideEffects: None
- admissionReviewVersions:
  - v1
  - v1beta1
  clientConfig:
    service:
      name: yurt-manager-webhook-service
      namespace: {{ .Release.Namespace }}
      path: /validate-apps-openyurt-io-v1alpha1-yurtstaticset
  failurePolicy: Fail
  name: validate.apps.v1alpha1.yurtstaticset.openyurt.io
  rules:
  - apiGroups:
    - apps.openyurt.io
    apiVersions:
    - v1alpha1
    operations:
    - CREATE
    - UPDATE
    resources:
    - yurtstaticsets
  sideEffects: None