aboutsummaryrefslogtreecommitdiffstats
path: root/vnfs/DAaaS/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'vnfs/DAaaS/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml')
-rw-r--r--vnfs/DAaaS/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml15
1 files changed, 15 insertions, 0 deletions
diff --git a/vnfs/DAaaS/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml b/vnfs/DAaaS/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml
new file mode 100644
index 00000000..748ec293
--- /dev/null
+++ b/vnfs/DAaaS/prometheus-operator/templates/prometheus-operator/psp-clusterrole.yaml
@@ -0,0 +1,15 @@
+{{- if and .Values.prometheusOperator.enabled .Values.global.rbac.create .Values.global.rbac.pspEnabled }}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: {{ template "prometheus-operator.fullname" . }}-operator-psp
+ labels:
+ app: {{ template "prometheus-operator.name" . }}-operator
+{{ include "prometheus-operator.labels" . | indent 4 }}
+rules:
+- apiGroups: ['extensions']
+ resources: ['podsecuritypolicies']
+ verbs: ['use']
+ resourceNames:
+ - {{ template "prometheus-operator.fullname" . }}-operator
+{{- end }}