v1.16: networkpolicies under networking.k8s.io/v1

manifests/dashboard/read-user-sa-rbac.yaml

@@ -116,7 +116,6 @@ rules:
   - deployments/status
   - ingresses
   - ingresses/status
-  - networkpolicies
   - replicasets
   - replicasets/scale
   - replicasets/status

manifests/prometheus/grafana/templates/role.yaml

@@ -10,7 +10,7 @@ metadata:
     release: {{ .Release.Name }}
 {{- if .Values.rbac.pspEnabled }}
 rules:
-- apiGroups:      ['extensions']
+- apiGroups:      ['policy']
   resources:      ['podsecuritypolicies']
   verbs:          ['use']
   resourceNames:  [{{ template "grafana.fullname" . }}]

roles/calico/templates/calico-v3.2.yaml.j2

@@ -399,7 +399,6 @@ rules:
     resources:
       - pods
       - namespaces
-      - networkpolicies
       - nodes
       - serviceaccounts
     verbs:

roles/calico/templates/calico-v3.3.yaml.j2

@@ -408,7 +408,6 @@ rules:
     resources:
       - pods
       - namespaces
-      - networkpolicies
       - nodes
       - serviceaccounts
     verbs:

roles/deploy/files/read-group-rbac.yaml

@@ -109,7 +109,6 @@ rules:
   - deployments/status
   - ingresses
   - ingresses/status
-  - networkpolicies
   - replicasets
   - replicasets/scale
   - replicasets/status

roles/flannel/templates/kube-flannel.yaml.j2

@@ -51,7 +51,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: flannel
 rules:
-  - apiGroups: ['extensions']
+  - apiGroups: ['policy']
     resources: ['podsecuritypolicies']
     verbs: ['use']
     resourceNames: ['psp.flannel.unprivileged']

roles/kube-router/templates/kuberouter.yaml.j2

@@ -154,14 +154,6 @@ rules:
       - list
       - get
       - watch
-  - apiGroups:
-    - extensions
-    resources:
-      - networkpolicies
-    verbs:
-      - get
-      - list
-      - watch
 
 ---
 kind: ClusterRoleBinding