Kubernetes 1.16.0 api reference change

[ta/caas-security.git] / rbac_manifests / caas-infra-psp.yaml

diff --git a/rbac_manifests/caas-infra-psp.yaml b/rbac_manifests/caas-infra-psp.yaml
index 8392e87..c932751 100644 (file)
--- a/rbac_manifests/caas-infra-psp.yaml
+++ b/rbac_manifests/caas-infra-psp.yaml
@@ -13,7 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-apiVersion: extensions/v1beta1
+apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
   name: caas-infra
@@ -41,6 +41,8 @@ spec:
     rule: RunAsAny
   allowedCapabilities:
     - NET_BIND_SERVICE
+    - SETGID
+    - SETUID
     - ALL
     - IPC_LOCK
     - SYS_RESOURCE