subjects:
- kind: ServiceAccount
  name: istio-cni
  namespace: {{ .Release.Namespace }}
---
{{- if .Values.cni.repair.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: istio-cni-repair-rolebinding
  labels:
    k8s-app: istio-cni-repair
    istio.io/rev: {{ .Values.revision | default "default" }}

      configDir: ""
      # If enabled, and ambient is enabled, DNS redirection will be enabled
      dnsCapture: false


    repair:
      enabled: true
      hub: ""
      tag: ""

      # Repair controller has 3 modes. Pick which one meets your use cases. Note only one may be used.
      # This defines the action the controller will take when a pod is detected as broken.

- name: CHAINED_CNI_PLUGIN value: "{{ .Values.cni.chained }}" - name: REPAIR_ENABLED value: "{{ .Values.cni.repair.enabled }}" - name: REPAIR_NODE_NAME valueFrom: fieldRef: fieldPath: spec.nodeName - name: REPAIR_LABEL_PODS value: "{{.Values.cni.repair.labelPods}}" # Set to true to enable pod deletion - name: REPAIR_DELETE_PODS value: "{{.Values.cni.repair.deletePods}}" - name: REPAIR_RUN_AS_DAEMON value: "true" - name: REPAIR_SIDECAR_ANNOTATION value: "sidecar.istio.io/status" - name: REPAIR_INIT_CONTAINER_NAME...

redstone redumbrella reg.dk reggio-calabria.it reggio-emilia.it reggiocalabria.it reggioemilia.it rehab reise reisen reit reklam.hu rel.ht rel.pl reliance remotewd.com ren rendalen.no rennebu.no rennesoy.no rennesøy.no rent rentals rep.br rep.kp repair repbody.aero repl.co repl.run report republican res.aero res.in research.aero research.museum reservd.com reservd.dev.thingdust.io reservd.disrec.thingdust.io reservd.testing.thingdust.io reserve-online.com reserve-online.net resindevice.io resistance.museum...

            - name: REPAIR_LABEL_PODS
              value: "{{.Values.cni.repair.labelPods}}"
            # Set to true to enable pod deletion
            - name: REPAIR_DELETE_PODS
              value: "{{.Values.cni.repair.deletePods}}"
            - name: REPAIR_REPAIR_PODS
              value: "{{.Values.cni.repair.repairPods}}"
            - name: REPAIR_RUN_AS_DAEMON
              value: "true"
            - name: REPAIR_SIDECAR_ANNOTATION

  - apiGroups: [""]
    resources: ["pods"]
    verbs: ["watch", "get", "list"]
{{- if .Values.cni.repair.repairPods }}
{{- /*  No privileges needed*/}}
{{- else if .Values.cni.repair.deletePods }}
  - apiGroups: [""]
    resources: ["pods"]
    verbs: ["delete"]
{{- else if .Values.cni.repair.labelPods }}
  - apiGroups: [""]