Skip to content

Commit

Permalink
Fix gatekeeper-system namespace labels
Browse files Browse the repository at this point in the history
It looks like there is a conflict between the pod-security labels on the
gatekeeper namespace between what is configured by the gatekeeper manifests
and what openshift enforces.

This commit makes the generated configuration match openshift.
  • Loading branch information
larsks committed Jan 22, 2024
1 parent 2818afb commit 7848897
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions gatekeeper-system/overlays/nerc-ocp-prod/kustomization.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,3 +5,17 @@ commonLabels:

resources:
- ../../base

patches:
- patch: |
apiVersion: v1
kind: Namespace
metadata:
name: gatekeeper-system
labels:
pod-security.kubernetes.io/audit: baseline
pod-security.kubernetes.io/audit-version: v1.24
pod-security.kubernetes.io/enforce: restricted
pod-security.kubernetes.io/enforce-version: v1.24
pod-security.kubernetes.io/warn: baseline
pod-security.kubernetes.io/warn-version: v1.24

0 comments on commit 7848897

Please sign in to comment.