PSS migration (#285)

giantswarm · Oct 2, 2023 · ea791d9 · ea791d9
1 parent 300e184
commit ea791d9
Show file tree

Hide file tree

Showing 4 changed files with 23 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## Changed
+
+- Propagate `global.podSecurityStandards.enforced` value set to `false` for PSS migration
+
 ## [1.11.0] - 2023-08-02
 
 ### Added

diff --git a/helm/athena/templates/psp.yaml b/helm/athena/templates/psp.yaml
@@ -1,3 +1,4 @@
+{{- if not .Values.global.podSecurityStandards.enforced }}
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
@@ -28,3 +29,4 @@ spec:
   volumes:
   - configMap
   - secret
+{{- end }}
diff --git a/helm/athena/values.schema.json b/helm/athena/values.schema.json
@@ -19,6 +19,19 @@
         "clusterID": {
             "type": "string"
         },
+        "global": {
+            "type": "object",
+            "properties": {
+                "podSecurityStandards": {
+                    "type": "object",
+                    "properties": {
+                        "enforced": {
+                            "type": "boolean"
+                        }
+                    }
+                }
+            }
+        },        
         "groupID": {
             "type": "integer"
         },

diff --git a/helm/athena/values.yaml b/helm/athena/values.yaml
@@ -69,3 +69,7 @@ podSecurityContext:
 securityContext:
   seccompProfile:
     type: RuntimeDefault
+
+global:
+  podSecurityStandards:
+    enforced: false