Grant Consul API Gateway controller access to new PodSecurityPolicy

hashicorp · Oct 27, 2022 · 5af4a55 · 5af4a55
1 parent dfdf7ff
commit 5af4a55
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/charts/consul/templates/api-gateway-controller-clusterrole.yaml b/charts/consul/templates/api-gateway-controller-clusterrole.yaml
@@ -244,4 +244,12 @@ rules:
   - get
   - patch
   - update
+{{- if .Values.global.enablePodSecurityPolicies }}
+- apiGroups: ["policy"]
+  resources: ["podsecuritypolicies"]
+  resourceNames:
+    - {{ template "consul.fullname" . }}-api-gateway-controller
+  verbs:
+    - use
+{{- end }}
 {{- end }}