podSecurityStandard: restricted autogenControllers: none