Skip to content

Commit

Permalink
add toggle value for PSS migration (#195)
Browse files Browse the repository at this point in the history
  • Loading branch information
Berk Dehrioglu authored Oct 9, 2023
1 parent 24e4eaf commit c970236
Show file tree
Hide file tree
Showing 4 changed files with 22 additions and 1 deletion.
4 changes: 4 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

### Added

- Add `global.podSecurityStandards.enforced` value for PSS migration.

### Changed

- Remove SecretReconciler.
Expand Down
2 changes: 1 addition & 1 deletion helm/capa-iam-operator/templates/psp.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy" }}
{{- if not .Values.global.podSecurityStandards.enforced }}
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
Expand Down
13 changes: 13 additions & 0 deletions helm/capa-iam-operator/values.schema.json
Original file line number Diff line number Diff line change
Expand Up @@ -126,6 +126,19 @@
"type": "boolean"
}
}
},
"global": {
"type": "object",
"properties": {
"podSecurityStandards": {
"type": "object",
"properties": {
"enforced": {
"type": "boolean"
}
}
}
}
}
}
}
4 changes: 4 additions & 0 deletions helm/capa-iam-operator/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -38,3 +38,7 @@ securityContext:
capabilities:
drop:
- ALL

global:
podSecurityStandards:
enforced: false

0 comments on commit c970236

Please sign in to comment.