rbac¶

RBAC ownership is independent of service-account ownership.

Type: object

Path: rbac

create¶

null preserves legacy behavior: follow serviceAccount.create.
true manages roles/bindings even for an existing named account; false manages none.

Default: null

Type: string

Path: rbac.create

Preserve old shared RBAC names only for an existing installation.

Default: false

Type: boolean

Path: rbac.legacyNames

Required to render namespaces "*" with readOnly false, which grants pod create,
delete and exec in every namespace.

Default: false

Type: boolean

Path: rbac.allowClusterWideWrite