Use PSA on deploy scripts

deploy/static/provider/aws/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/aws/nlb-with-tls-termination/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/baremetal/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/cloud/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/do/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/exoscale/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/kind/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/oracle/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

deploy/static/provider/scw/deploy.yaml

@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1

hack/manifest-templates/common/namespace.yaml

@@ -5,3 +5,4 @@ metadata:
   labels:
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline