vnfs/DAaaS/operator/charts/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml

   1 {{- if and .Values.prometheusOperator.enabled .Values.global.rbac.create .Values.global.rbac.pspEnabled }}
   2 kind: ClusterRole
   3 apiVersion: rbac.authorization.k8s.io/v1
   4 metadata:
   5   name: {{ template "prometheus-operator.fullname" . }}-operator-psp
   6   labels:
   7     app: {{ template "prometheus-operator.name" . }}-operator
   8 {{ include "prometheus-operator.labels" . | indent 4 }}
   9 rules:
  10 - apiGroups: ['extensions']
  11   resources: ['podsecuritypolicies']
  12   verbs:     ['use']
  13   resourceNames:
  14   - {{ template "prometheus-operator.fullname" . }}-operator
  15 {{- end }}