Merge pull request #181 from mattmoyer/add-psp-cluster-role-permission

Give the concierge access to use any PodSecurityPolicy.

deploy/concierge/rbac.yaml

@@ -21,6 +21,9 @@ rules:
   - apiGroups: [ admissionregistration.k8s.io ]
     resources: [ validatingwebhookconfigurations, mutatingwebhookconfigurations ]
     verbs: [ get, list, watch ]
+  - apiGroups: [ policy ]
+    resources: [ podsecuritypolicies ]
+    verbs: [ use ]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1