diff --git a/examples/k8s/cluster-role.yaml b/examples/k8s/cluster-role.yaml index f51d9a7bd..323d818b5 100644 --- a/examples/k8s/cluster-role.yaml +++ b/examples/k8s/cluster-role.yaml @@ -51,3 +51,11 @@ rules: verbs: - list - watch +- apigroups: + - extensions + resourcenames: + - weave-scope + resources: + - podsecuritypolicies + verbs: + - use diff --git a/examples/k8s/psp.yaml b/examples/k8s/psp.yaml new file mode 100644 index 000000000..555a7c027 --- /dev/null +++ b/examples/k8s/psp.yaml @@ -0,0 +1,21 @@ +apiVersion: extensions/v1beta1 +kind: PodSecurityPolicy +metadata: + name: weave-scope +spec: + privileged: true + hostPID: true + hostNetwork: true + allowedCapabilities: + - 'NET_ADMIN' + fsGroup: + rule: RunAsAny + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - secret + - hostPath \ No newline at end of file