-
Bug
-
Resolution: Done
-
Critical
-
None
-
4.13.0
-
None
-
Critical
-
No
-
Proposed
-
False
-
Description of problem:
We shouldn't enforce PSa in 4.13, neither by label sync, neither by global cluster config.
Version-Release number of selected component (if applicable):
4.13
How reproducible:
100%
Steps to Reproduce:
As a cluster admin: 1. create two new namespaces/projects: pokus, openshift-pokus 2. as a cluster-admin, attempt to create a privileged pod in both the namespaces from 1.
Actual results:
pod creation is blocked by pod security admission
Expected results:
only a warning about pod violating the namespace pod security level should be emitted
Additional info:
This is currently a noop for 4.14
- blocks
-
-
- Closed
-
- is cloned by
-
-
- Closed
-