diff --git a/internal/pkg/skuba/addons/psp.go b/internal/pkg/skuba/addons/psp.go
index 2268721ebd..8590d3aa81 100644
--- a/internal/pkg/skuba/addons/psp.go
+++ b/internal/pkg/skuba/addons/psp.go
@@ -300,9 +300,6 @@ spec:
   hostPID: false
   hostIPC: false
   hostNetwork: false
-  hostPorts:
-  - min: 0
-    max: 65535
   # SELinux
   seLinux:
     # SELinux is unused in CaaSP
diff --git a/internal/pkg/skuba/kubernetes/versions.go b/internal/pkg/skuba/kubernetes/versions.go
index 541c80b584..a612225652 100644
--- a/internal/pkg/skuba/kubernetes/versions.go
+++ b/internal/pkg/skuba/kubernetes/versions.go
@@ -106,7 +106,7 @@ var (
 				Dex:           &AddonVersion{"2.16.0", 6},
 				Gangway:       &AddonVersion{"3.1.0-rev4", 5},
 				MetricsServer: &AddonVersion{"0.3.6", 1},
-				PSP:           &AddonVersion{"", 3},
+				PSP:           &AddonVersion{"", 4},
 			},
 		},
 		"1.16.2": KubernetesVersion{