Merge pull request #2316 from pjbgf/warn-pod-security

[security] Enable pod security warnings for flux-system
fluxcd · Jan 21, 2022 · 365d2d1 · 365d2d1
2 parents 0a6d5d9 + f7853c4
commit 365d2d1
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/manifests/install/namespace.yaml b/manifests/install/namespace.yaml
@@ -2,3 +2,6 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: flux-system
+  labels:
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: latest
diff --git a/pkg/manifestgen/install/templates.go b/pkg/manifestgen/install/templates.go
@@ -165,6 +165,9 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: {{.Namespace}}
+  labels:
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: latest
 `
 
 func execTemplate(obj interface{}, tmpl, filename string) error {