kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: psp:netchecker-agent-hostnet namespace: {{ netcheck_namespace }} rules: - apiGroups: - policy resourceNames: - netchecker-agent-hostnet resources: - podsecuritypolicies verbs: - use