Enforce privileged PSA by default

Align HyperShift with OpenShift's expectation that PSA is enforcing privileged by default instead of restricted.
openshift · Jan 10, 2025 · 6acc352 · 6acc352
1 parent 1388902
commit 6acc352
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/control-plane-operator/controllers/hostedcontrolplane/kas/config.go b/control-plane-operator/controllers/hostedcontrolplane/kas/config.go
@@ -99,7 +99,7 @@ func generateConfig(p KubeAPIServerConfigParams) *kcpv1.KubeAPIServerConfig {
 									Kind:       "PodSecurityConfiguration",
 								},
 								Defaults: podsecurityadmissionv1beta1.PodSecurityDefaults{
-									Enforce:        "restricted",
+									Enforce:        "privileged",
 									EnforceVersion: "latest",
 									Audit:          "restricted",
 									AuditVersion:   "latest",