feat: first backport of April (#1282)

Author: britaniar

cmd/hubagent/options/options_test.go

@@ -729,6 +729,7 @@ func TestWebhookOptions(t *testing.T) {
 				GuardRailWhitelistedUsers:              "",
 				GuardRailDenyModifyMemberClusterLabels: false,
 				EnableWorkload:                         false,
+				EnablePDBs:                             true,
 				UseCertManager:                         false,
 			},
 		},
@@ -753,6 +754,7 @@ func TestWebhookOptions(t *testing.T) {
 				GuardRailWhitelistedUsers:              "user1,user2",
 				GuardRailDenyModifyMemberClusterLabels: true,
 				EnableWorkload:                         true,
+				EnablePDBs:                             true,
 				UseCertManager:                         true,
 			},
 		},
@@ -768,6 +770,7 @@ func TestWebhookOptions(t *testing.T) {
 				GuardRailWhitelistedUsers:              "",
 				GuardRailDenyModifyMemberClusterLabels: false,
 				EnableWorkload:                         false,
+				EnablePDBs:                             true,
 				UseCertManager:                         false,
 			},
 		},
@@ -783,6 +786,7 @@ func TestWebhookOptions(t *testing.T) {
 				GuardRailWhitelistedUsers:              "",
 				GuardRailDenyModifyMemberClusterLabels: false,
 				EnableWorkload:                         false,
+				EnablePDBs:                             true,
 				UseCertManager:                         false,
 			},
 		},

cmd/hubagent/options/webhooks.go

@@ -120,7 +120,8 @@ func (o *WebhookOptions) AddFlags(flags *flag.FlagSet) {
 	flags.BoolVar(
 		&o.EnablePDBs,
 		"enable-pdbs",
-		false,
+		// TO-DO (chenyu1): use the true value for compatibility reasons; this will be set to false in a later release.
+		true,
 		"Enable PodDisruptionBudgets to be created directly in the hub cluster or not. If set to true, the KubeFleet PodDisruptionBudget validating webhook, which blocks the creation of PodDisruptionBudgets outside KubeFleet reserved namespaces, will be disabled. This option only applies if webhooks are enabled.",
 	)