Skip to content

Commit

Permalink
PSP Toggle
Browse files Browse the repository at this point in the history
  • Loading branch information
tuladhar committed Sep 28, 2023
1 parent 3a35477 commit 307e3ea
Show file tree
Hide file tree
Showing 4 changed files with 23 additions and 0 deletions.
4 changes: 4 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

### Changed

- Propagate `global.podSecurityStandards.enforced` value set to `false` for PSS migration

## [0.9.0] - 2023-09-14

### Changed
Expand Down
2 changes: 2 additions & 0 deletions helm/dex-operator/templates/psp.yaml
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
{{- if not .Values.global.podSecurityStandards.enforced }}
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
Expand Down Expand Up @@ -35,3 +36,4 @@ spec:
hostNetwork: false
hostIPC: false
hostPID: false
{{- end }}
13 changes: 13 additions & 0 deletions helm/dex-operator/values.schema.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,19 @@
"baseDomain": {
"type": "string"
},
"global": {
"type": "object",
"properties": {
"podSecurityStandards": {
"type": "object",
"properties": {
"enforced": {
"type": "boolean"
}
}
}
}
},
"image": {
"type": "object",
"properties": {
Expand Down
4 changes: 4 additions & 0 deletions helm/dex-operator/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -32,3 +32,7 @@ podSecurityContext:
securityContext:
seccompProfile:
type: RuntimeDefault

global:
podSecurityStandards:
enforced: false

0 comments on commit 307e3ea

Please sign in to comment.