make charts

charts/rancher-istio/101.1.0+up1.15.3/charts/kiali/templates/psp.yaml

@@ -1,4 +1,5 @@
 {{- if .Values.global.rbac.pspEnabled }}
+{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -64,4 +65,5 @@ spec:
   - secret
   - downwardAPI
   - persistentVolumeClaim
-{{- end }}
+{{- end }}
+{{- end }}

charts/rancher-istio/101.1.0+up1.15.3/charts/tracing/templates/psp.yaml

@@ -9,6 +9,7 @@ metadata:
     heritage: {{ .Release.Service }}
     release: {{ .Release.Name }}
 ---
+{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -83,4 +84,5 @@ spec:
   - emptyDir
   - secret
   - persistentVolumeClaim
-{{- end }}
+{{- end }}
+{{- end }}

charts/rancher-istio/101.1.0+up1.15.3/templates/clusterrole.yaml

@@ -122,6 +122,7 @@ rules:
   - serviceaccounts
   verbs:
   - '*'
+{{- if and .Values.global.rbac.pspEnabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
 - apiGroups:
   - policy
   resourceNames:
@@ -130,3 +131,4 @@ rules:
   - podsecuritypolicies
   verbs:
   - use
+{{- end }}

charts/rancher-istio/101.1.0+up1.15.3/templates/istio-cni-psp.yaml

@@ -1,4 +1,5 @@
 {{- if .Values.global.rbac.pspEnabled }}
+{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
@@ -48,4 +49,5 @@ rules:
   - podsecuritypolicies
   verbs:
   - use
-{{- end }}
+{{- end }}
+{{- end }}

charts/rancher-istio/101.1.0+up1.15.3/templates/istio-install-psp.yaml

@@ -1,4 +1,5 @@
 {{- if .Values.global.rbac.pspEnabled }}
+{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
@@ -27,4 +28,5 @@ spec:
   volumes:
     - 'configMap'
     - 'secret'
+{{- end }}
 {{- end }}

charts/rancher-istio/101.1.0+up1.15.3/templates/istio-psp.yaml

@@ -1,4 +1,5 @@
 {{- if .Values.global.rbac.pspEnabled }}
+{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -78,4 +79,5 @@ spec:
   - secret
   - downwardAPI
   - persistentVolumeClaim
+{{- end }}
 {{- end }}

index.yaml

@@ -6533,7 +6533,7 @@ entries:
       catalog.cattle.io/upstream-version: 1.15.3
     apiVersion: v1
     appVersion: 1.15.3
-    created: "2022-11-23T12:56:33.253369306+05:30"
+    created: "2023-01-11T12:21:52.705673788+05:30"
     dependencies:
     - condition: kiali.enabled
       name: kiali
@@ -6543,7 +6543,7 @@ entries:
       repository: file://./charts/tracing
     description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
       for details.
-    digest: 338c1403977fbb27af1d0f9459fe597d5cdb1d5b5ee8a52c8af29ffd19717f73
+    digest: 01afccb2a6cea70b118529ff82b436bc993064da98d2e45e9b19a91b1ca2a613
     icon: https://charts.rancher.io/assets/logos/istio.svg
     keywords:
     - networking