role.yaml 662 B

12345678910111213141516171819202122232425
  1. {{- if .Values.rbac.create -}}
  2. {{- $fullName := include "logstash.fullname" . -}}
  3. apiVersion: rbac.authorization.k8s.io/v1
  4. kind: Role
  5. metadata:
  6. name: {{ $fullName | quote }}
  7. labels:
  8. app: "{{ template "logstash.fullname" . }}"
  9. chart: "{{ .Chart.Name }}"
  10. heritage: {{ .Release.Service | quote }}
  11. release: {{ .Release.Name | quote }}
  12. rules:
  13. - apiGroups:
  14. - extensions
  15. resources:
  16. - podsecuritypolicies
  17. resourceNames:
  18. {{- if eq .Values.podSecurityPolicy.name "" }}
  19. - {{ $fullName | quote }}
  20. {{- else }}
  21. - {{ .Values.podSecurityPolicy.name | quote }}
  22. {{- end }}
  23. verbs:
  24. - use
  25. {{- end -}}