PodSecurityPolicy is a cluster-wide resource and should not have a namespace field

[iakat]

From https://kubernetes.io/docs/concepts/policy/pod-security-policy/:

A Pod Security Policy is a cluster-level resource that controls security sensitive aspects of the pod specification.

Examples as to where it's set:

loki/production/helm/loki/templates/podsecuritypolicy.yaml

Line 6 in e2a7941

namespace: {{ .Release.Namespace }}

This is an issue when using the manifests through other tools such as Terraform where they hit different API endpoints when a resource is expected to be cluster-wide or namespace-wide, thus resulting in errors until manually fixing the manifests.

[iakat]

ClusterRole in promtail is also an offender

loki/production/helm/promtail/templates/clusterrole.yaml

Line 11 in e2a7941

namespace: {{ .Release.Namespace }}

[cyriltovena]

Thanks for reporting! If you want to contribute that’s an easy one ;)