role.yaml 591 B

12345678910111213141516171819
  1. {{- if .Values.rbac.create }}
  2. apiVersion: rbac.authorization.k8s.io/v1
  3. kind: Role
  4. metadata:
  5. name: {{ template "fluent-bit-loki.fullname" . }}
  6. namespace: {{ .Release.Namespace }}
  7. labels:
  8. app: {{ template "fluent-bit-loki.name" . }}
  9. chart: {{ template "fluent-bit-loki.chart" . }}
  10. heritage: {{ .Release.Service }}
  11. release: {{ .Release.Name }}
  12. {{- if .Values.rbac.pspEnabled }}
  13. rules:
  14. - apiGroups: ['extensions']
  15. resources: ['podsecuritypolicies']
  16. verbs: ['use']
  17. resourceNames: [{{ template "fluent-bit-loki.fullname" . }}]
  18. {{- end }}
  19. {{- end }}