From 571180529660e81ab5f92e937b771d28a228c424 Mon Sep 17 00:00:00 2001
From: Billy Tat <btat@suse.com>
Date: Tue, 5 Oct 2021 14:56:21 -0700
Subject: [PATCH] Apply c6891889 (author: StrongMonkey) to Rancher 2.6 docs

---
 .../rancher-2.5/1.6-hardening-2.5/_index.md   | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/content/rancher/v2.6/en/security/rancher-2.5/1.6-hardening-2.5/_index.md b/content/rancher/v2.6/en/security/rancher-2.5/1.6-hardening-2.5/_index.md
index d5b7512ebab..92567b208a8 100644
--- a/content/rancher/v2.6/en/security/rancher-2.5/1.6-hardening-2.5/_index.md
+++ b/content/rancher/v2.6/en/security/rancher-2.5/1.6-hardening-2.5/_index.md
@@ -286,6 +286,36 @@ addons: |
     - configMap
     - projected
   ---
+  apiVersion: rbac.authorization.k8s.io/v1
+  kind: ClusterRole
+  metadata:
+    name: psp:restricted
+  rules:
+  - apiGroups:
+    - extensions
+    resourceNames:
+    - restricted
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use
+  ---
+  apiVersion: rbac.authorization.k8s.io/v1
+  kind: ClusterRoleBinding
+  metadata:
+    name: psp:restricted
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
+    name: psp:restricted
+  subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: system:serviceaccounts
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: system:authenticated
+  ---
   apiVersion: networking.k8s.io/v1
   kind: NetworkPolicy
   metadata: