{{- if .Values.rbac.create -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
    name: {{ include "aws-node-termination-handler.fullname" . }}
    labels:
        {{- include "aws-node-termination-handler.labels" . | nindent 8 }}
    {{- with .Values.annotations }}
    annotations:
        {{- toYaml . | nindent 8 }}
    {{- end }}
roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: {{ include "aws-node-termination-handler.fullname" . }}
subjects:
    - kind: ServiceAccount
      name: {{ template "aws-node-termination-handler.serviceAccountName" . }}
      namespace: {{ .Release.Namespace }}
{{- end }}