Delete the ValidatingWebhookConfiguration or MutatingWebhookConfiguration objects that back a policy engine.

Third-party enforcement such as Gatekeeper, Kyverno, or image signature verification stops rejecting anything.

Pod Security Admission is unaffected.

It is a built-in API server controller rather than a webhook, so namespace enforce labels still apply.

On its own this only removes a guard.

It becomes privilege only alongside a verb that creates the workload the webhook was rejecting.