Merge pull request #972 from camilamacedo86/ensure-that-psa-label-latest

OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions

Author: openshift-merge-bot[bot]

manifests/0000_50_olm_00-namespace.yaml

@@ -4,7 +4,7 @@ metadata:
   name: openshift-operator-lifecycle-manager
   labels:
     pod-security.kubernetes.io/enforce: restricted
-    pod-security.kubernetes.io/enforce-version: "v1.24"
+    pod-security.kubernetes.io/enforce-version: latest
     openshift.io/scc: ""
     openshift.io/cluster-monitoring: "true"
   annotations:
@@ -21,7 +21,7 @@ metadata:
   name: openshift-operators
   labels:
     pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/enforce-version: "v1.24"
+    pod-security.kubernetes.io/enforce-version: latest
     openshift.io/scc: ""
   annotations:
     openshift.io/node-selector: ""

microshift-manifests/0000_50_olm_00-namespace.yaml

@@ -4,7 +4,7 @@ metadata:
   name: openshift-operator-lifecycle-manager
   labels:
     pod-security.kubernetes.io/enforce: restricted
-    pod-security.kubernetes.io/enforce-version: "v1.24"
+    pod-security.kubernetes.io/enforce-version: latest
     openshift.io/scc: ""
     openshift.io/cluster-monitoring: "true"
   annotations:
@@ -21,7 +21,7 @@ metadata:
   name: openshift-operators
   labels:
     pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/enforce-version: "v1.24"
+    pod-security.kubernetes.io/enforce-version: latest
     openshift.io/scc: ""
   annotations:
     openshift.io/node-selector: ""

values.yaml

@@ -3,12 +3,12 @@ rbacApiVersion: rbac.authorization.k8s.io
 namespace: openshift-operator-lifecycle-manager
 namespace_psa: 
   enforceLevel: restricted
-  enforceVersion: '"v1.24"'
+  enforceVersion: latest
 catalog_namespace: openshift-marketplace
 operator_namespace: openshift-operators
 operator_namespace_psa: 
   enforceLevel: privileged
-  enforceVersion: '"v1.24"'
+  enforceVersion: latest
 imagestream: true
 writeStatusName: operator-lifecycle-manager
 writeStatusNameCatalog: operator-lifecycle-manager-catalog