X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=deploy%2Fcluster%2Ftemplates%2Fflux-addon.yaml;h=37f2cf3043e3fe538525d4373cf3d5e575e2fd95;hb=7a6bf66cfeaeaff0bea0bf2da6ffd3467e998492;hp=c0402531a0b5ad26efd23a926357c71cd1bc3954;hpb=39e430c9aba39a47cb388701b450c1b23d8b12e5;p=icn.git

diff --git a/deploy/cluster/templates/flux-addon.yaml b/deploy/cluster/templates/flux-addon.yaml
index c040253..37f2cf3 100644
--- a/deploy/cluster/templates/flux-addon.yaml
+++ b/deploy/cluster/templates/flux-addon.yaml
@@ -4280,6 +4280,20 @@ data:
           app: notification-controller
       policyTypes:
       - Ingress
+    ---
+    apiVersion: rbac.authorization.k8s.io/v1
+    kind: RoleBinding
+    metadata:
+      name: psp:privileged:flux-system
+      namespace: flux-system
+    roleRef:
+      apiGroup: rbac.authorization.k8s.io
+      kind: ClusterRole
+      name: psp:privileged
+    subjects:
+    - kind: Group
+      name: system:serviceaccounts:flux-system
+      apiGroup: rbac.authorization.k8s.io
   sync.yaml: |
     {{- if .Values.flux.decryptionSecret }}
     ---