actions/fluxcd-flux2
3
0
Fork 0
mirror of https://github.com/fluxcd/flux2.git synced 2026-02-21 15:11:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

Merge pull request #2316 from pjbgf/warn-pod-security

Browse source 
[security] Enable pod security warnings for flux-system
This commit is contained in:
Stefan Prodan 2022-01-21 13:53:11 +02:00 committed by GitHub
commit 365d2d102d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
manifests/install/namespace.yaml
View file

@ -2,3 +2,6 @@ apiVersion: v1
kind: Namespace kind: Namespace
metadata: metadata:
name: flux-system name: flux-system
labels:
pod-security.kubernetes.io/warn: restricted
pod-security.kubernetes.io/warn-version: latest

3
pkg/manifestgen/install/templates.go
View file

@ -165,6 +165,9 @@ apiVersion: v1
kind: Namespace kind: Namespace
metadata: metadata:
name: {{.Namespace}} name: {{.Namespace}}
labels:
pod-security.kubernetes.io/warn: restricted
pod-security.kubernetes.io/warn-version: latest
` `
func execTemplate(obj interface{}, tmpl, filename string) error { func execTemplate(obj interface{}, tmpl, filename string) error {