From cee1b3a0364a930fbf91b6fe27359792ef9aef7a Mon Sep 17 00:00:00 2001 From: kevinrizza Date: Mon, 15 Dec 2025 14:43:05 -0500 Subject: [PATCH] fix(kas): disable PSA enforcement in 4.21 --- .../controllers/hostedcontrolplane/v2/kas/config.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/control-plane-operator/controllers/hostedcontrolplane/v2/kas/config.go b/control-plane-operator/controllers/hostedcontrolplane/v2/kas/config.go index ae643d65241..3260983a502 100644 --- a/control-plane-operator/controllers/hostedcontrolplane/v2/kas/config.go +++ b/control-plane-operator/controllers/hostedcontrolplane/v2/kas/config.go @@ -117,7 +117,7 @@ func generateConfig(p KubeAPIServerConfigParams) (*kcpv1.KubeAPIServerConfig, er Kind: "PodSecurityConfiguration", }, Defaults: podsecurityadmissionv1.PodSecurityDefaults{ - Enforce: "restricted", + Enforce: "privileged", EnforceVersion: "latest", Audit: "restricted", AuditVersion: "latest",