kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: name: psp:local-volume-provisioner namespace: {{ local_volume_provisioner_namespace }} rules: - apiGroups: - policy resourceNames: - local-volume-provisioner resources: - podsecuritypolicies verbs: - use