Files
Markus Schlotbohm 9a20026370 [stable/seq] Feature add psp (#18676)
* Add psp to chart stable/seq

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Add variables to README.md, bump chart version

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Add psp

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Fix apiGroup

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Chaged role from cluster role to role

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Fix role and rolebinding apiVersion

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Fix template clause in deployment

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Add securityContext to deployment

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Rebased from master and removed duplicated podSecurityPolicy.apiGroup template

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Set privileged to false

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>
2020-01-30 16:10:19 -08:00

17 lines
522 B
YAML

{{- if and .Values.rbac.create .Values.podSecurityPolicy.create -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app: {{ template "seq.name" . }}
chart: {{ template "seq.chart" . }}
release: {{ .Release.Name }}
heritage: {{ .Release.Service }}
name: {{ template "seq.fullname" . }}
rules:
- apiGroups: ['{{ template "podSecurityPolicy.apiGroup" . }}']
resources: ['podsecuritypolicies']
verbs: ['use']
resourceNames: [{{ template "seq.fullname" . }}]
{{- end -}}