From 329944ed63ead692e3d6aa5081306aa57785da6f Mon Sep 17 00:00:00 2001
From: Karl-Philipp Richter <krichter@posteo.de>
Date: Fri, 24 Apr 2020 20:39:20 +0200
Subject: [PATCH] [stable/kube-state-metrics] Use apiGroup policy rather than
 extension for k8s > 1.15 in ClusterRole psp-kube-state-metrics (#21563)

Signed-off-by: Karl-Philipp Richter <krichter@posteo.de>
---
 stable/kube-state-metrics/Chart.yaml                     | 2 +-
 stable/kube-state-metrics/templates/psp-clusterrole.yaml | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/stable/kube-state-metrics/Chart.yaml b/stable/kube-state-metrics/Chart.yaml
index 5003d1b802..96ce2fd447 100644
--- a/stable/kube-state-metrics/Chart.yaml
+++ b/stable/kube-state-metrics/Chart.yaml
@@ -6,7 +6,7 @@ keywords:
 - monitoring
 - prometheus
 - kubernetes
-version: 2.8.3
+version: 2.8.4
 appVersion: 1.9.5
 home: https://github.com/kubernetes/kube-state-metrics/
 sources:
diff --git a/stable/kube-state-metrics/templates/psp-clusterrole.yaml b/stable/kube-state-metrics/templates/psp-clusterrole.yaml
index 0ba606e660..217abc9504 100644
--- a/stable/kube-state-metrics/templates/psp-clusterrole.yaml
+++ b/stable/kube-state-metrics/templates/psp-clusterrole.yaml
@@ -9,7 +9,12 @@ metadata:
     app.kubernetes.io/instance: {{ .Release.Name }}
   name: psp-{{ template "kube-state-metrics.fullname" . }}
 rules:
+{{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
+{{- if semverCompare "> 1.15.0-0" $kubeTargetVersion }}
+- apiGroups: ['policy']
+{{- else }}
 - apiGroups: ['extensions']
+{{- end }}
   resources: ['podsecuritypolicies']
   verbs:     ['use']
   resourceNames: