Kubernetes Helm

  name:  psp-{{ template "zabbix.agent.fullname" . }}

rules:

  - apiGroups: ['extensions']

    resources: ['podsecuritypolicies']

    verbs:     ['use']

    resourceNames:

      - {{ template "zabbix.agent.fullname" . }}

  - apiGroups: ['security.openshift.io']

    verbs:     ['use']

    resources: ['securitycontextconstraints']

    resourceNames:

      - privileged

      - hostaccess

      - hostnetwork

{{- end -}}