Set ns privileged for scylla which forces SYS_NICE

Pythoner6 · Feb 17, 2024 · 652aacc · 652aacc
1 parent 0910392
commit 652aacc
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/k8s/gerrit/gerrit.cue b/k8s/gerrit/gerrit.cue
@@ -35,7 +35,13 @@ _affinity: {
 
 kustomizations: $default: #dependsOn: [scyllaoperator.kustomizations.helm]
 kustomizations: $default: manifest: {
-  ns: #AppNamespace
+  ns: #AppNamespace & {
+    metadata: labels: {
+      "pod-security.kubernetes.io/enforce": "privileged"
+      "pod-security.kubernetes.io/audit": "privileged"
+      "pod-security.kubernetes.io/warn": "privileged"
+    }
+  }
   "global-refdb": scyllaclusters.#ScyllaCluster & {
     spec: {
       version: "5.2.15"