mirror of https://git.rancher.io/charts
Add condition for applying PSPs in DaemonSets.
parent
026c7c6b30
commit
fc922c4724
|
@ -57,7 +57,7 @@ kind: ServiceAccount
|
|||
metadata:
|
||||
name: "{{ .Release.Name }}-k3s-journald-aggregator"
|
||||
namespace: "{{ .Release.Namespace }}"
|
||||
{{- if .Values.global.psp.enabled }}
|
||||
{{- if and .Values.global.psp.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
|
|
|
@ -62,7 +62,7 @@ kind: ServiceAccount
|
|||
metadata:
|
||||
name: "{{ .Release.Name }}-rke-aggregator"
|
||||
namespace: "{{ .Release.Namespace }}"
|
||||
{{- if .Values.global.psp.enabled }}
|
||||
{{- if and .Values.global.psp.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
|
|
|
@ -63,7 +63,7 @@ kind: ServiceAccount
|
|||
metadata:
|
||||
name: "{{ .Release.Name }}-rke2-journald-aggregator"
|
||||
namespace: "{{ .Release.Namespace }}"
|
||||
{{- if .Values.global.psp.enabled }}
|
||||
{{- if and .Values.global.psp.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
|
|
Loading…
Reference in New Issue