diff --git a/templates/server-clusterrolebinding.yaml b/templates/server-clusterrolebinding.yaml index c3080ba..ecf6a70 100644 --- a/templates/server-clusterrolebinding.yaml +++ b/templates/server-clusterrolebinding.yaml @@ -1,6 +1,10 @@ {{ template "vault.mode" . }} {{- if and (ne .mode "") (and (eq (.Values.global.enabled | toString) "true") (eq (.Values.server.authDelegator.enabled | toString) "true")) }} +{{- if .Capabilities.APIVersions.Has "rbac.authorization.k8s.io/v1" -}} +apiVersion: rbac.authorization.k8s.io/v1 +{{- else }} apiVersion: rbac.authorization.k8s.io/v1beta1 +{{- end }} kind: ClusterRoleBinding metadata: name: {{ template "vault.fullname" . }}-server-binding diff --git a/templates/server-discovery-rolebinding.yaml b/templates/server-discovery-rolebinding.yaml index 99649a6..4752665 100644 --- a/templates/server-discovery-rolebinding.yaml +++ b/templates/server-discovery-rolebinding.yaml @@ -1,7 +1,11 @@ {{ template "vault.mode" . }} {{- if ne .mode "external" }} {{- if and (eq .mode "ha" ) (eq (.Values.global.enabled | toString) "true") }} +{{- if .Capabilities.APIVersions.Has "rbac.authorization.k8s.io/v1" -}} +apiVersion: rbac.authorization.k8s.io/v1 +{{- else }} apiVersion: rbac.authorization.k8s.io/v1beta1 +{{- end }} kind: RoleBinding metadata: name: {{ template "vault.fullname" . }}-discovery-rolebinding