From f86d3f460f03caab1b1036d9f4f554f508ac07be Mon Sep 17 00:00:00 2001
From: Camila Macedo <7708031+camilamacedo86@users.noreply.github.com>
Date: Mon, 3 Mar 2025 16:51:57 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20(fix)=20PSA=20enforcement:=20Mov?=
 =?UTF-8?q?e=20from=20baseline=20to=20restricted?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Namespaces should be restricted by default rather than granted additional, unnecessary permissions.
---
 config/base/common/namespace.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/base/common/namespace.yaml b/config/base/common/namespace.yaml
index b8f524ae6..3faa861ed 100644
--- a/config/base/common/namespace.yaml
+++ b/config/base/common/namespace.yaml
@@ -3,6 +3,6 @@ kind: Namespace
 metadata:
   labels:
     app.kubernetes.io/part-of: olm
-    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/enforce: restricted
     pod-security.kubernetes.io/enforce-version: "v1.32"
   name: system