allow role to use privileged podsecurtitypolicies

Author: FxKu

pkg/controller/controller.go

@@ -248,8 +248,22 @@ func (c *Controller) initRole() {
 		            "verbs": [
 		                "create"
 		            ]
+		        },
+		        {
+		            "apiGroups": [
+		                extensions
+		            ],
+		            "resources": [
+		                "podsecuritypolicies"
+		            ],
+		            "resourceNames": [
+		                "privileged"
+		            ],
+		            "verbs": [
+		                "use"
+		            ]
 		        }
-			]
+		    ]
 		}`, c.PodServiceAccount.Name)
 	}
 	c.logger.Info("Parse roles")