1 {{- if .Values.rbac.create }}
3 apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
5 name: {{ include "common.names.fullname" . }}
6 namespace: {{ .Release.Namespace | quote }}
7 labels: {{- include "common.labels.standard" . | nindent 4 }}
8 {{- if .Values.commonLabels }}
9 {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
11 {{- if .Values.commonAnnotations }}
12 annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
14 # yamllint disable rule:indentation
16 {{- $pspAvailable := (semverCompare "<1.25-0" (include "common.capabilities.kubeVersion" .)) -}}
17 {{- if and $pspAvailable .Values.psp.create }}
21 - 'podsecuritypolicies'
25 - {{ include "common.names.fullname" . }}
27 {{- if .Values.rbac.rules }}
28 {{- include "common.tplvalues.render" ( dict "value" .Values.rbac.rules "context" $ ) | nindent 2 }}
30 # yamllint enable rule:indentation