From f98af5b32579b1d65781a07fedc60cda5dbdd68b Mon Sep 17 00:00:00 2001
From: xilabao <chenr.fnst@cn.fujitsu.com>
Date: Thu, 29 Dec 2016 16:08:42 +0800
Subject: [PATCH] create psp policy in local-up-cluster.sh

---
 hack/local-up-cluster.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/hack/local-up-cluster.sh b/hack/local-up-cluster.sh
index f652b281400..4d3417f78ab 100755
--- a/hack/local-up-cluster.sh
+++ b/hack/local-up-cluster.sh
@@ -633,6 +633,13 @@ function start_kubedns {
     fi
 }
 
+function create_psp_policy {
+    echo "Create podsecuritypolicy policies for RBAC."
+    ${KUBECTL} --kubeconfig="${CERT_DIR}/admin.kubeconfig" create -f ${KUBE_ROOT}/examples/podsecuritypolicy/rbac/policies.yaml
+    ${KUBECTL} --kubeconfig="${CERT_DIR}/admin.kubeconfig" create -f ${KUBE_ROOT}/examples/podsecuritypolicy/rbac/roles.yaml
+    ${KUBECTL} --kubeconfig="${CERT_DIR}/admin.kubeconfig" create -f ${KUBE_ROOT}/examples/podsecuritypolicy/rbac/bindings.yaml
+}
+
 function print_success {
 if [[ "${START_MODE}" != "kubeletonly" ]]; then
   cat <<EOF
@@ -720,6 +727,10 @@ if [[ "${START_MODE}" != "nokubelet" ]]; then
   start_kubelet
 fi
 
+if [[ -n "${PSP_ADMISSION}" && "${ENABLE_RBAC}" = true ]]; then
+    create_psp_policy
+fi
+
 print_success
 
 if [[ "${ENABLE_DAEMON}" = false ]]; then