github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/ingress-nginx/templates/default-backend-role.yaml (about)

     1  {{- if and .Values.rbac.create .Values.podSecurityPolicy.enabled .Values.defaultBackend.enabled -}}
     2  {{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  kind: Role
     5  metadata:
     6    labels:
     7      {{- include "ingress-nginx.labels" . | nindent 4 }}
     8      app.kubernetes.io/component: default-backend
     9      {{- with .Values.defaultBackend.labels }}
    10      {{- toYaml . | nindent 4 }}
    11      {{- end }}
    12    name: {{ include "ingress-nginx.fullname" . }}-backend
    13    namespace: {{ .Release.Namespace }}
    14  rules:
    15    - apiGroups:      [{{ template "podSecurityPolicy.apiGroup" . }}]
    16      resources:      ['podsecuritypolicies']
    17      verbs:          ['use']
    18      {{- with .Values.defaultBackend.existingPsp }}
    19      resourceNames:  [{{ . }}]
    20      {{- else }}
    21      resourceNames:  [{{ include "ingress-nginx.fullname" . }}-backend]
    22      {{- end }}
    23  {{- end }}
    24  {{- end }}