When creating a pod controller (e.g. deployment) with pod spec that will be mutated by SCCs, the users might still get a warning about the pod not meeting given namespace pod security level.

4.11

100%

1. create a namespace with restricted PSa warning level (the default)
2. create a deployment with a pod with an empty security context

You get a warning about the deployment's pod not meeting the NS's pod security admission requirements.

No warning if the pod for the deployment would be properly mutated by SCCs in order to fulfill the NS's pod security requirements.

originally implemented as a part of https://issues.redhat.com/browse/AUTH-337