github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-18 16:21:13 +00:00
Code Issues Projects Releases Wiki Activity

PodSecurity: update webhook manifest to label namespace as restricted

Browse Source
This commit is contained in:
Jordan Liggitt 2021-11-03 11:35:20 -04:00
parent 4986780da3
commit d92e0dbea6
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
staging/src/k8s.io/pod-security-admission/webhook/manifests/10-namespace.yaml
View File

@ -1,4 +1,8 @@
apiVersion: v1 apiVersion: v1
kind: Namespace kind: Namespace
metadata: metadata:
name: pod-security-webhook name: pod-security-webhook
labels:
# Even though the validating webhook excludes intercepting this namespace to avoid a circular dependency,
# the deployment pod spec is compatible with the restricted level, so mark the namespace as restricted anyway.
pod-security.kubernetes.io/enforce: restricted