Include validate-psp-install.yaml

rancher · Jan 30, 2023 · 9395f6f · 9395f6f
1 parent d0ad7ec
commit 9395f6f
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/charts/helm-project-operator/templates/validate-psp-install.yaml b/charts/helm-project-operator/templates/validate-psp-install.yaml
@@ -0,0 +1,7 @@
+#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}}
+#{{- if .Values.global.cattle.psp.enabled }}
+#{{- if not (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
+#{{- fail "The target cluster does not have the PodSecurityPolicy API resource. Please disable PSPs in this chart before proceeding." -}}
+#{{- end }}
+#{{- end }}
+#{{- end }}