github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/thanos/templates/query-frontend/psp.yaml (about)

     1  {{- $pspAvailable := (semverCompare "<1.25-0" (include "common.capabilities.kubeVersion" .)) -}}
     2  {{- if and $pspAvailable .Values.queryFrontend.enabled .Values.queryFrontend.pspEnabled .Values.queryFrontend.rbac.create -}}
     3  apiVersion: policy/v1beta1
     4  kind: PodSecurityPolicy
     5  metadata:
     6    name: {{ include "common.names.fullname" . }}-query-frontend
     7    namespace: {{ .Release.Namespace | quote }}
     8    labels: {{- include "common.labels.standard" . | nindent 4 }}
     9      app.kubernetes.io/component: query-frontend
    10      {{- if .Values.commonLabels }}
    11      {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
    12      {{- end }}
    13    {{- if .Values.commonAnnotations }}
    14    annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
    15    {{- end }}
    16  spec:
    17    fsGroup:
    18      rule: RunAsAny
    19    runAsUser:
    20      ranges:
    21      - max: 1001
    22        min: 1001
    23      rule: MustRunAs
    24    seLinux:
    25      rule: RunAsAny
    26    supplementalGroups:
    27      rule: RunAsAny
    28    volumes:
    29    - secret
    30  {{- end -}}