apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  annotations:
    helm.sh/hook: pre-install, pre-upgrade
    helm.sh/hook-weight: "-1"
  creationTimestamp: "2026-04-21T17:07:44Z"
  labels:
    app.kubernetes.io/instance: envoy-gateway
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: gateway-helm
    app.kubernetes.io/version: v1.7.0
    helm.sh/chart: gateway-helm-v1.7.0
  name: envoy-gateway-gateway-helm-certgen:envoy-gateway-system
  resourceVersion: "638"
  uid: 357d4bf2-e2af-45fa-85c9-5cdb66087021
rules:
- apiGroups:
  - admissionregistration.k8s.io
  resources:
  - mutatingwebhookconfigurations
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - admissionregistration.k8s.io
  resourceNames:
  - envoy-gateway-topology-injector.envoy-gateway-system
  resources:
  - mutatingwebhookconfigurations
  verbs:
  - update
  - patch