Files
Etienne 25f7b3314c [stable/elastalert] Add ServiceAccount and PodSecurityPolicy to Elastalert (#21850)
* Add ServiceAccount and PodSecurityPolicy to Elastalert

Signed-off-by: Etienne Tremel <etienne@kogusenn.com>

* Use podSecurityPolicy.create

Signed-off-by: Etienne Tremel <etienne@kogusenn.com>
2020-04-10 06:37:47 -07:00

21 lines
506 B
YAML

{{- if .Values.podSecurityPolicy.create }}
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: Role
metadata:
name: {{ template "elastalert.fullname" . }}
labels:
app: {{ template "elastalert.name" . }}
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: {{ .Release.Name }}
heritage: {{ .Release.Service }}
rules:
- apiGroups:
- policy
resources:
- podsecuritypolicies
resourceNames:
- {{ template "elastalert.fullname" . }}
verbs:
- use
{{- end -}}