From d9249f11bd9167327f8fb5f9bfa2ee5f75f2c632 Mon Sep 17 00:00:00 2001
From: ArchiFleKs <lefevre.kevin@gmail.com>
Date: Mon, 5 Aug 2019 15:16:15 +0200
Subject: [PATCH] feat: enable psps by default when possible

---
 terraform/modules/eks-addons/external-dns.tf          | 3 ++-
 terraform/modules/eks-addons/flux.tf                  | 1 +
 terraform/modules/eks-addons/kiam.tf                  | 2 +-
 terraform/modules/eks-addons/node-problem-detector.tf | 2 ++
 terraform/modules/eks-addons/sealed-secrets.tf        | 2 ++
 5 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/terraform/modules/eks-addons/external-dns.tf b/terraform/modules/eks-addons/external-dns.tf
index e4ceec5b..d8ef3bc9 100644
--- a/terraform/modules/eks-addons/external-dns.tf
+++ b/terraform/modules/eks-addons/external-dns.tf
@@ -5,7 +5,8 @@ image:
 provider: aws
 txtPrefix: "ext-dns-"
 rbac:
- create: true
+  create: true
+  pspEnabled: true
 nodeSelector:
   node-role.kubernetes.io/controller: ""
 tolerations:
diff --git a/terraform/modules/eks-addons/flux.tf b/terraform/modules/eks-addons/flux.tf
index 7ae6f099..b0e757f4 100644
--- a/terraform/modules/eks-addons/flux.tf
+++ b/terraform/modules/eks-addons/flux.tf
@@ -4,6 +4,7 @@ image:
   tag: ${var.flux["version"]}
 rbac:
   create: true
+  pspEnabled: true
 helmOperator:
   create: true
 additionalArgs:
diff --git a/terraform/modules/eks-addons/kiam.tf b/terraform/modules/eks-addons/kiam.tf
index c238a75c..3aaaccc4 100644
--- a/terraform/modules/eks-addons/kiam.tf
+++ b/terraform/modules/eks-addons/kiam.tf
@@ -1,7 +1,7 @@
 locals {
   values_kiam = <<VALUES
 psp:
-  create: false
+  create: true
 agent:
   image:
     tag: ${var.kiam["version"]}
diff --git a/terraform/modules/eks-addons/node-problem-detector.tf b/terraform/modules/eks-addons/node-problem-detector.tf
index cd3c92eb..1ff2a0f9 100644
--- a/terraform/modules/eks-addons/node-problem-detector.tf
+++ b/terraform/modules/eks-addons/node-problem-detector.tf
@@ -1,5 +1,7 @@
 locals {
   values_npd = <<VALUES
+rbac:
+  pspEnabled: true
 image:
   tag: ${var.npd["version"]}
 affinity:
diff --git a/terraform/modules/eks-addons/sealed-secrets.tf b/terraform/modules/eks-addons/sealed-secrets.tf
index a35e8e06..da109a70 100644
--- a/terraform/modules/eks-addons/sealed-secrets.tf
+++ b/terraform/modules/eks-addons/sealed-secrets.tf
@@ -1,5 +1,7 @@
 locals {
   values_sealed_secrets = <<VALUES
+rbac:
+  pspEnabled: true
 image:
   tag: ${var.sealed_secrets["version"]}
 VALUES