github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/prometheus-community/kube-state-metrics/templates/psp-clusterrole.yaml (about)

     1  {{- if and .Values.podSecurityPolicy.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    labels:
     6      {{- include "kube-state-metrics.labels" . | indent 4 }}
     7    name: psp-{{ template "kube-state-metrics.fullname" . }}
     8  rules:
     9  {{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
    10  {{- if semverCompare "> 1.15.0-0" $kubeTargetVersion }}
    11  - apiGroups: ['policy']
    12  {{- else }}
    13  - apiGroups: ['extensions']
    14  {{- end }}
    15    resources: ['podsecuritypolicies']
    16    verbs:     ['use']
    17    resourceNames:
    18    - {{ template "kube-state-metrics.fullname" . }}
    19  {{- end }}