TKGm Enable PodSecurityPolicy Admission Controller

gistfile1.txt

#@ load("@ytt:overlay", "overlay")
#@ load("@ytt:data", "data")

#! Enable PodSecurityPolicy Admission Controller.
#@overlay/match missing_ok=True,by=overlay.subset({"kind":"KubeadmControlPlane"})
---
spec:
  kubeadmConfigSpec:
    #@overlay/match missing_ok=True
    clusterConfiguration:
      apiServer:
        extraArgs:
         #@overlay/match missing_ok=True
         enable-admission-plugins: "AlwaysPullImages,NodeRestriction,EventRateLimit,PodSecurityPolicy"