role.yaml 698 B

123456789101112131415161718192021222324
  1. {{- if and .Values.alertmanager.enabled .Values.rbac.create (eq .Values.alertmanager.useClusterRole false) (not .Values.alertmanager.useExistingRole) -}}
  2. {{- range $.Values.alertmanager.namespaces }}
  3. apiVersion: {{ template "rbac.apiVersion" . }}
  4. kind: Role
  5. metadata:
  6. labels:
  7. {{- include "prometheus.alertmanager.labels" $ | nindent 4 }}
  8. name: {{ template "prometheus.alertmanager.fullname" $ }}
  9. namespace: {{ . }}
  10. rules:
  11. {{- if $.Values.podSecurityPolicy.enabled }}
  12. - apiGroups:
  13. - extensions
  14. resources:
  15. - podsecuritypolicies
  16. verbs:
  17. - use
  18. resourceNames:
  19. - {{ template "prometheus.alertmanager.fullname" $ }}
  20. {{- else }}
  21. []
  22. {{- end }}
  23. {{- end }}
  24. {{- end }}