add pss flag (#89)

giantswarm · Mar 4, 2024 · b677dbe · b677dbe
1 parent a7e511c
commit b677dbe
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add `global.podSecurityStandards.enforced` flag to disable PSPs by default.
+
 ## [0.1.2] - 2024-01-04
 
 ### Changed

diff --git a/helm/cluster-api-cleaner-vsphere/templates/psp.yaml b/helm/cluster-api-cleaner-vsphere/templates/psp.yaml
@@ -1,3 +1,4 @@
+{{- if not .Values.global.podSecurityStandards.enforced }}
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
@@ -28,3 +29,4 @@ spec:
   hostNetwork: false
   hostIPC: false
   hostPID: false
+{{- end }}
diff --git a/helm/cluster-api-cleaner-vsphere/values.yaml b/helm/cluster-api-cleaner-vsphere/values.yaml
@@ -9,6 +9,10 @@ registry:
 
 logLevel: 0
 
+global:
+  podSecurityStandards:
+    enforced: true
+
 pod:
   user:
     id: 1000