github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/prometheus-community/kube-prometheus-stack/templates/prometheus-operator/psp-clusterrole.yaml (about)

     1  {{- if and .Values.prometheusOperator.enabled .Values.global.rbac.create .Values.global.rbac.pspEnabled }}
     2  {{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
     3  kind: ClusterRole
     4  apiVersion: rbac.authorization.k8s.io/v1
     5  metadata:
     6    name: {{ template "kube-prometheus-stack.fullname" . }}-operator-psp
     7    labels:
     8      app: {{ template "kube-prometheus-stack.name" . }}-operator
     9  {{ include "kube-prometheus-stack.labels" . | indent 4 }}
    10  rules:
    11  {{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
    12  {{- if semverCompare "> 1.15.0-0" $kubeTargetVersion }}
    13  - apiGroups: ['policy']
    14  {{- else }}
    15  - apiGroups: ['extensions']
    16  {{- end }}
    17    resources: ['podsecuritypolicies']
    18    verbs:     ['use']
    19    resourceNames:
    20    - {{ template "kube-prometheus-stack.fullname" . }}-operator
    21  {{- end }}
    22  {{- end }}