[stable/zfs-localpv]: update charts to 1.4.0 (#285)

- update chart version
- update README
- update values.yaml

Signed-off-by: shubham <shubham.bajpai@mayadata.io>

deploy/helm/charts/templates/psp.yaml

@@ -2,10 +2,7 @@
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
-  name: {{ template "zfslocalpv.fullname" . }}-psp
-  {{- with .Values.zfsNode.annotations }}
-  annotations: {{ toYaml . | nindent 4 }}
-  {{- end }}
+  name: openebs-zfs-node-psp
   labels:
     {{- include "zfslocalpv.zfsNode.labels" . | nindent 4 }}
 spec:

deploy/helm/charts/templates/rbac.yaml

@@ -44,6 +44,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get", "list", "watch", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["get", "list", "watch", "update", "patch"]
   - apiGroups: ["*"]
     resources: ["zfsvolumes", "zfssnapshots", "zfsbackups", "zfsrestores"]
     verbs: ["*"]
@@ -160,5 +163,35 @@ roleRef:
   kind: ClusterRole
   name: openebs-zfs-driver-registrar-role
   apiGroup: rbac.authorization.k8s.io
+
+{{- if .Values.rbac.pspEnabled }}
 ---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: openebs-zfs-node-role
+  labels:
+    {{- include "zfslocalpv.zfsNode.labels" . | nindent 4 }}
+rules:
+- apiGroups: ['policy']
+  resources: ['podsecuritypolicies']
+  verbs:     ['use']
+  resourceNames:
+  - openebs-zfs-node-psp
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: openebs-zfs-node-binding
+  labels:
+    {{- include "zfslocalpv.zfsNode.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: openebs-zfs-node-role
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.serviceAccount.zfsNode.name }}
+    namespace: {{ $.Release.Namespace }}
+{{- end }}
 {{- end }}