psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true

roles/network_plugin/calico/templates/calico-cr.yml.j2

@@ -11,3 +11,11 @@ rules:
       - nodes
     verbs:
       - get
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use

roles/network_plugin/canal/templates/canal-cr-calico.yml.j2

@@ -78,3 +78,11 @@ rules:
     verbs:
       - get
       - list
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use

roles/network_plugin/canal/templates/canal-cr-flannel.yml.j2

@@ -24,3 +24,11 @@ rules:
       - nodes/status
     verbs:
       - patch
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use

roles/network_plugin/cilium/templates/cilium-cr.yml.j2

@@ -64,3 +64,11 @@ rules:
       - ciliumendpoints/status
     verbs:
       - "*"
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use

roles/network_plugin/contiv/templates/contiv-netmaster-clusterrole.yml.j2

@@ -16,3 +16,11 @@ rules:
       - watch
       - list
       - update
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use

roles/network_plugin/contiv/templates/contiv-netplugin-clusterrole.yml.j2

@@ -19,3 +19,11 @@ rules:
       - list
       - update
       - get
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use

roles/network_plugin/flannel/templates/cni-flannel-rbac.yml.j2

@@ -29,6 +29,14 @@ rules:
       - nodes/status
     verbs:
       - patch
+  - apiGroups:
+    - policy
+    resourceNames:
+    - privileged
+    resources:
+    - podsecuritypolicies
+    verbs:
+    - use
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1

roles/network_plugin/weave/templates/weave-net.yml.j2

@@ -41,6 +41,14 @@ items:
         verbs:
           - patch
           - update
+      - apiGroups:
+        - policy
+        resourceNames:
+        - privileged
+        resources:
+        - podsecuritypolicies
+        verbs:
+        - use
   - apiVersion: rbac.authorization.k8s.io/v1beta1
     kind: ClusterRoleBinding
     metadata: