github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/prometheus-community/kube-prometheus-stack/templates/alertmanager/psp-role.yaml (about)

     1  {{- if and .Values.alertmanager.enabled .Values.global.rbac.create .Values.global.rbac.pspEnabled }}
     2  {{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
     3  kind: Role
     4  apiVersion: rbac.authorization.k8s.io/v1
     5  metadata:
     6    name: {{ template "kube-prometheus-stack.fullname" . }}-alertmanager
     7    namespace: {{ template "kube-prometheus-stack.namespace" . }}
     8    labels:
     9      app: {{ template "kube-prometheus-stack.name" . }}-alertmanager
    10  {{ include "kube-prometheus-stack.labels" . | indent 4 }}
    11  rules:
    12  {{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
    13  {{- if semverCompare "> 1.15.0-0" $kubeTargetVersion }}
    14  - apiGroups: ['policy']
    15  {{- else }}
    16  - apiGroups: ['extensions']
    17  {{- end }}
    18    resources: ['podsecuritypolicies']
    19    verbs:     ['use']
    20    resourceNames:
    21    - {{ template "kube-prometheus-stack.fullname" . }}-alertmanager
    22  {{- end }}
    23  {{- end }}