github.com/inspektor-gadget/inspektor-gadget@v0.28.1/docs/examples/disable-psp-demo.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRole
     3  metadata:
     4    name: disable-psp-demo
     5  rules:
     6  - apiGroups:
     7    - policy
     8    resources:
     9    - podsecuritypolicies
    10    resourceNames:
    11    - privileged
    12    verbs:
    13    - use
    14  ---
    15  apiVersion: rbac.authorization.k8s.io/v1
    16  kind: ClusterRoleBinding
    17  metadata:
    18      name: disable-psp-demo
    19  subjects:
    20  - kind: ServiceAccount
    21    name: default
    22    namespace: demo
    23  roleRef:
    24     apiGroup: rbac.authorization.k8s.io
    25     kind: ClusterRole
    26     name: disable-psp-demo