diff --git a/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc-rbac.yaml b/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc-rbac.yaml index b9f58f503..df54bed29 100644 --- a/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc-rbac.yaml +++ b/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc-rbac.yaml @@ -1,4 +1,5 @@ -{{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.securityContextConstraints.enabled -}} +{{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled (.Capabilities.APIVersions.Has "security.openshift.io/v1") -}} + apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: diff --git a/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml b/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml index 03aa5a09f..313e4cee0 100644 --- a/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml +++ b/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml @@ -1,4 +1,4 @@ -{{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.securityContextConstraints.enabled (empty .Values.controller.admissionWebhooks.existingScc) -}} +{{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled (.Capabilities.APIVersions.Has "security.openshift.io/v1") -}} apiVersion: security.openshift.io/v1 kind: SecurityContextConstraints metadata: