controller: service: type: ClusterIP podSecurityPolicy: enabled: true