Excempt build controller SA from PodSecurity admission

Mirrors openshift/cluster-kube-apiserver-operator#1358
openshift-cherrypick-robot · Jun 24, 2022 · e6ae026 · e6ae026
1 parent bb670aa
commit e6ae026
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/control-plane-operator/controllers/hostedcontrolplane/kas/config.go b/control-plane-operator/controllers/hostedcontrolplane/kas/config.go
@@ -95,6 +95,11 @@ func generateConfig(p KubeAPIServerConfigParams, version semver.Version) *kcpv1.
 									Warn:           "restricted",
 									WarnVersion:    "latest",
 								},
+								Exemptions: podsecurityadmissionv1beta1.PodSecurityExemptions{
+									Usernames: []string{
+										"system:serviceaccount:openshift-infra:build-controller",
+									},
+								},
 							},
 						},
 					},