Charles Chan | e1e5e62 | 2022-02-16 15:17:05 -0800 | [diff] [blame] | 1 | {{/* |
2 | # Copyright 2020-present Open Networking Foundation | ||||
3 | # SPDX-License-Identifier: Apache-2.0 | ||||
4 | */}} | ||||
5 | |||||
6 | {{- if .Values.podsecuritypolicy.enabled }} | ||||
7 | apiVersion: rbac.authorization.k8s.io/v1 | ||||
8 | kind: ClusterRole | ||||
9 | metadata: | ||||
10 | name: psp:upf | ||||
11 | rules: | ||||
12 | - apiGroups: ['policy'] | ||||
13 | resources: ['podsecuritypolicies'] | ||||
14 | verbs: ['use'] | ||||
15 | resourceNames: | ||||
16 | - 1-upf | ||||
17 | {{- end }} |