Enforce PodSecurityStandards since psp disappeared in 1.25

giantswarm / starboard-exporter

A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).

Apache License 2.0

59 stars 23 forks source link

Enforce PodSecurityStandards since psp disappeared in 1.25 #320

Closed ebCrypto closed 1 month ago

ebCrypto commented 9 months ago

Pod Security Policies were removed in kubernetes 1.25 and the default chart fails to install on a modern cluster running 1.29.2

Checklist

[ ] Update changelog in CHANGELOG.md.
[x] Make sure values.yaml and values.schema.json are valid.
[ ] (Giant Swarm) If creating a release, bump the version and appVersion in Chart.yaml.

stone-z commented 9 months ago

Hey @ebCrypto, thanks for the PR! I totally agree we should move to disabling PSPs by default. We still have some users in the process of migrating away from PSPs and for whom it would be a breaking change to invert the logic here without a major version release, so we have to hold off just a bit longer.

Feel free to leave this PR open if you like, and I'll merge it when we're past any potential breakage. In the meantime, PSPs can of course be toggled off through the Helm values.

stone-z commented 1 month ago

Well that took a lot longer than I hoped on our side :sweat_smile: thanks!