apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: gce:podsecuritypolicy:privileged labels: kubernetes.io/cluster-service: "true" addonmanager.kubernetes.io/mode: Reconcile rules: - apiGroups: - policy resourceNames: - gce.privileged resources: - podsecuritypolicies verbs: - use
