Merge branch 'main' into coredns-1.11.4

giantswarm · Nov 14, 2024 · 32fb303 · 32fb303
2 parents d41d8da + 94a7d48
commit 32fb303
Show file tree

Hide file tree

Showing 5 changed files with 4 additions and 67 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -12,6 +12,10 @@ and this project's packages adheres to [Semantic Versioning](http://semver.org/s
 - Update `coredns` image to [1.11.4](https://github.com/coredns/coredns/releases/tag/v1.11.4).
 - Explicitly expose liveness and readiness probe ports in deployments.
 
+### Removed
+
+- Remove PodSecurityPolicy and associated Resources and values.
+
 ## [1.22.0] - 2024-09-10
 
 ### Changed

diff --git a/helm/coredns-app/templates/psp.yaml b/helm/coredns-app/templates/psp.yaml
diff --git a/helm/coredns-app/templates/rbac.yaml b/helm/coredns-app/templates/rbac.yaml
@@ -23,15 +23,6 @@ rules:
   verbs:
   - watch
   - list
-- apiGroups:
-  - policy
-  - extensions
-  resources:
-  - podsecuritypolicies
-  verbs:
-  - use
-  resourceNames:
-  - {{ .Values.name }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/helm/coredns-app/values.schema.json b/helm/coredns-app/values.schema.json
@@ -53,19 +53,6 @@
                 }
             }
         },
-        "global": {
-            "type": "object",
-            "properties": {
-                "podSecurityStandards": {
-                    "type": "object",
-                    "properties": {
-                        "enforced": {
-                            "type": "boolean"
-                        }
-                    }
-                }
-            }
-        },
         "groupID": {
             "type": "integer"
         },

diff --git a/helm/coredns-app/values.yaml b/helm/coredns-app/values.yaml
@@ -82,10 +82,5 @@ mastersInstance:
   nodeSelector:
     "node-role.kubernetes.io/control-plane": '""'
 
-
-global:
-  podSecurityStandards:
-    enforced: false
-
 # Uncomment and define `additionalLocalZones` to add additional local zones to CoreDNS config
 # additionalLocalZones: []