{% if taskserv.panel_enabled == "mail" %}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ taskserv.name }}-mail-exec
  namespace: {{ taskserv.mail_namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "list"]
- apiGroups: [""]
  resources: ["pods/exec"]
  verbs: ["create"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: {{ taskserv.name }}-mail-exec
  namespace: {{ taskserv.mail_namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: {{ taskserv.name }}-mail-exec
subjects:
- kind: ServiceAccount
  name: {{ taskserv.name }}
  namespace: {{ taskserv.namespace }}
{% endif %}