fix(falco): set the appropiate apiVersion for rbac

Signed-off-by: Leonardo Grasso <[email protected]>
falcosecurity · Oct 1, 2020 · a0dfeee · a0dfeee
1 parent 0083243
commit a0dfeee
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 2 deletions.
diff --git a/falco/templates/_helpers.tpl b/falco/templates/_helpers.tpl
@@ -72,4 +72,15 @@ Extract the unixSocket's directory path
 {{- if .Values.falco.grpc.unixSocketPath -}}
 {{- .Values.falco.grpc.unixSocketPath | trimPrefix "unix://" | dir -}}
 {{- end -}}
+{{- end -}}
+
+{{/*
+Return the appropriate apiVersion for rbac.
+*/}}
+{{- define "rbac.apiVersion" -}}
+{{- if .Capabilities.APIVersions.Has "rbac.authorization.k8s.io/v1" }}
+{{- print "rbac.authorization.k8s.io/v1" -}}
+{{- else -}}
+{{- print "rbac.authorization.k8s.io/v1beta1" -}}
+{{- end -}}
 {{- end -}}
diff --git a/falco/templates/clusterrole.yaml b/falco/templates/clusterrole.yaml
@@ -1,6 +1,6 @@
 {{- if .Values.rbac.create }}
 kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: {{ template "rbac.apiVersion" . }}
 metadata:
   name: {{ template "falco.fullname" .}}
   labels:

diff --git a/falco/templates/clusterrolebinding.yaml b/falco/templates/clusterrolebinding.yaml
@@ -1,6 +1,6 @@
 {{- if .Values.rbac.create }}
 kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: {{ template "rbac.apiVersion" . }}
 metadata:
   name: {{ template "falco.fullname" .}}
   labels: