From 59c799291b627b8c23d5870c1975b7771c82c0a7 Mon Sep 17 00:00:00 2001 From: friedrich goerz Date: Tue, 8 Nov 2022 14:23:05 +0100 Subject: [PATCH] DEV-633: added labels for pod.sec.standards to namespace definition --- clusterspecifics/namespaces/mobene-cusprod.yaml | 8 +++++--- clusterspecifics/namespaces/mobene-cusqa.yaml | 8 +++++--- clusterspecifics/namespaces/mobene-keycloak.yaml | 8 +++++--- clusterspecifics/namespaces/mobene-nsodev.yaml | 8 +++++--- 4 files changed, 20 insertions(+), 12 deletions(-) diff --git a/clusterspecifics/namespaces/mobene-cusprod.yaml b/clusterspecifics/namespaces/mobene-cusprod.yaml index 9f225a1..a9d6877 100644 --- a/clusterspecifics/namespaces/mobene-cusprod.yaml +++ b/clusterspecifics/namespaces/mobene-cusprod.yaml @@ -2,6 +2,8 @@ apiVersion: v1 kind: Namespace metadata: name: mobene-cusprod -spec: - finalizers: - - kubernetes + labels: + pod-security.kubernetes.io/enforce: restricted + pod-security.kubernetes.io/enforce-version: latest + pod-security.kubernetes.io/warn: restricted + pod-security.kubernetes.io/warn-version: latest diff --git a/clusterspecifics/namespaces/mobene-cusqa.yaml b/clusterspecifics/namespaces/mobene-cusqa.yaml index 4914054..2dcd09c 100644 --- a/clusterspecifics/namespaces/mobene-cusqa.yaml +++ b/clusterspecifics/namespaces/mobene-cusqa.yaml @@ -2,6 +2,8 @@ apiVersion: v1 kind: Namespace metadata: name: mobene-cusqa -spec: - finalizers: - - kubernetes + labels: + pod-security.kubernetes.io/enforce: restricted + pod-security.kubernetes.io/enforce-version: latest + pod-security.kubernetes.io/warn: restricted + pod-security.kubernetes.io/warn-version: latest diff --git a/clusterspecifics/namespaces/mobene-keycloak.yaml b/clusterspecifics/namespaces/mobene-keycloak.yaml index 25a2c33..8b24b45 100644 --- a/clusterspecifics/namespaces/mobene-keycloak.yaml +++ b/clusterspecifics/namespaces/mobene-keycloak.yaml @@ -2,6 +2,8 @@ apiVersion: v1 kind: Namespace metadata: name: mobene-keycloak -spec: - finalizers: - - kubernetes + labels: + pod-security.kubernetes.io/enforce: restricted + pod-security.kubernetes.io/enforce-version: latest + pod-security.kubernetes.io/warn: restricted + pod-security.kubernetes.io/warn-version: latest diff --git a/clusterspecifics/namespaces/mobene-nsodev.yaml b/clusterspecifics/namespaces/mobene-nsodev.yaml index be8c628..4c4d063 100644 --- a/clusterspecifics/namespaces/mobene-nsodev.yaml +++ b/clusterspecifics/namespaces/mobene-nsodev.yaml @@ -2,6 +2,8 @@ apiVersion: v1 kind: Namespace metadata: name: mobene-nsodev -spec: - finalizers: - - kubernetes + labels: + pod-security.kubernetes.io/enforce: restricted + pod-security.kubernetes.io/enforce-version: latest + pod-security.kubernetes.io/warn: restricted + pod-security.kubernetes.io/warn-version: latest