Disable PodSecurityPolicies by default to support Kubernetes 1.25+
PodSecurityPolicies were removed in favour of Pod security standards
that are configured on a cluster or namespace level [1].
[1] https://kubernetes.io/blog/2022/08/25/pod-security-admission-stable/
Change-Id: Ia1e55c09bfad30fd209e96b3eddbda339edc31aa
This commit is contained in:
parent
5423672a21
commit
517332653f
|
@ -4,8 +4,8 @@ rbac:
|
||||||
create: true
|
create: true
|
||||||
## Use an existing ClusterRole/Role (depending on rbac.namespaced false/true)
|
## Use an existing ClusterRole/Role (depending on rbac.namespaced false/true)
|
||||||
# useExistingRole: name-of-some-(cluster)role
|
# useExistingRole: name-of-some-(cluster)role
|
||||||
pspEnabled: true
|
pspEnabled: false
|
||||||
pspUseAppArmor: true
|
pspUseAppArmor: false
|
||||||
namespaced: false
|
namespaced: false
|
||||||
extraRoleRules: []
|
extraRoleRules: []
|
||||||
# - apiGroups: []
|
# - apiGroups: []
|
||||||
|
|
|
@ -144,7 +144,7 @@ podManagementPolicy: OrderedReady
|
||||||
|
|
||||||
rbac:
|
rbac:
|
||||||
create: true
|
create: true
|
||||||
pspEnabled: true
|
pspEnabled: false
|
||||||
|
|
||||||
readinessProbe:
|
readinessProbe:
|
||||||
httpGet:
|
httpGet:
|
||||||
|
|
|
@ -4,7 +4,7 @@ rbac:
|
||||||
create: true
|
create: true
|
||||||
|
|
||||||
podSecurityPolicy:
|
podSecurityPolicy:
|
||||||
enabled: true
|
enabled: false
|
||||||
|
|
||||||
imagePullSecrets:
|
imagePullSecrets:
|
||||||
# - name: "image-pull-secret"
|
# - name: "image-pull-secret"
|
||||||
|
|
|
@ -52,7 +52,7 @@ podAnnotations:
|
||||||
|
|
||||||
rbac:
|
rbac:
|
||||||
create: true
|
create: true
|
||||||
pspEnabled: true
|
pspEnabled: false
|
||||||
|
|
||||||
readinessProbe:
|
readinessProbe:
|
||||||
failureThreshold: 5
|
failureThreshold: 5
|
||||||
|
|
Loading…
Reference in a new issue