PSA is enabled in 4.19 

    4.19.0-rc

Always    

    1. Create a namespace
    2. pod-security.kubernetes.io/enforce is being set

and

    1. Run: oc -n openshift-kube-apiserver get cm config -ojson | jq .data | rg config | awk '{ print $2 }' | sed 's/\\//g' | sed 's/"$//g' | sed 's/^"//g' | jq '.admission.pluginConfig.PodSecurity.configuration.defaults'     

    pod-security.kubernetes.io/enforce is being set

and

{
  "audit": "restricted",
  "audit-version": "latest",
  "enforce": "restricted",
  "enforce-version": "latest",
  "warn": "restricted",
  "warn-version": "latest"
}

    pod-security.kubernetes.io/enforce should not be set

or 

{
  "audit": "restricted",
  "audit-version": "latest",
  "enforce": "privileged",
  "enforce-version": "latest",
  "warn": "restricted",
  "warn-version": "latest"
}

    We need to disable the feature flag.