diff --git a/pkg/handlers/generic/lifecycle/serviceloadbalancer/metallb/handler.go b/pkg/handlers/generic/lifecycle/serviceloadbalancer/metallb/handler.go index d97cbd5f4..1597a41c8 100644 --- a/pkg/handlers/generic/lifecycle/serviceloadbalancer/metallb/handler.go +++ b/pkg/handlers/generic/lifecycle/serviceloadbalancer/metallb/handler.go @@ -35,9 +35,8 @@ const ( // These labels allow the MetalLB speaker pod to obtain elevated permissions, // which it requires in order to perform its network functionalities. var podSecurityReleaseNamespaceLabels = map[string]string{ - "pod-security.kubernetes.io/enforce": "privileged", - "pod-security.kubernetes.io/audit": "privileged", - "pod-security.kubernetes.io/warn": "privileged", + "pod-security.kubernetes.io/enforce": "privileged", + "pod-security.kubernetes.io/enforce-version": "latest", } type Config struct { diff --git a/pkg/handlers/utils/utils.go b/pkg/handlers/utils/utils.go index 24853a739..6b2e11f8f 100644 --- a/pkg/handlers/utils/utils.go +++ b/pkg/handlers/utils/utils.go @@ -103,8 +103,7 @@ func EnsureNamespaceWithName(ctx context.Context, c ctrlclient.Client, name stri func EnsureNamespaceWithMetadata(ctx context.Context, c ctrlclient.Client, name string, - labels, - annotations map[string]string, + labels, annotations map[string]string, ) error { ns := &corev1.Namespace{ TypeMeta: metav1.TypeMeta{