Enable PSA FG on Kubevirt

Enable PSA FG on Kubevirt to be compatible with k8s >= 1.24 and derivates with PSA in enforcing mode. Once available also in older versions of Kubevirt, we will have also to backport it to release-1.6 and release-1.7. Signed-off-by: Simone Tiraboschi <stirabos@redhat.com>
kubevirt · Sep 22, 2022 · 4296006 · 4296006
1 parent 3278399
commit 4296006
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/controllers/hyperconverged/hyperconverged_controller_test.go b/controllers/hyperconverged/hyperconverged_controller_test.go
@@ -209,6 +209,7 @@ var _ = Describe("HyperconvergedController", func() {
 					"NUMA",
 					"WithHostPassthroughCPU",
 					"VMExport",
+					"PSA",
 				}
 				// Get the KV
 				kvList := &kubevirtcorev1.KubeVirtList{}

diff --git a/controllers/operands/kubevirt.go b/controllers/operands/kubevirt.go
@@ -91,6 +91,9 @@ const (
 
 	// Export VMs to outside of the cluster
 	kvVMExportGate = "VMExport"
+
+	// enable Pod Security Admission handling
+	kvPSA = "PSA"
 )
 
 var (
@@ -107,6 +110,7 @@ var (
 		kvDownwardMetricsGate,
 		kvNUMA,
 		kvVMExportGate,
+		kvPSA,
 	}
 
 	// holds a list of mandatory KubeVirt feature gates. Some of them are the hard coded feature gates and some of