Merge pull request #169 from srl-labs/enforce-privileged-ns

added enforce privileged on the namespace resource for talos clusters
srl-labs · Aug 22, 2024 · 44df77f · 44df77f
2 parents 00bc808 + a38908e
commit 44df77f
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 10 deletions.
diff --git a/clabverter/assets/namespace.yaml.template b/clabverter/assets/namespace.yaml.template
@@ -3,3 +3,5 @@ apiVersion: v1
 kind: Namespace
 metadata:
     name: {{ .Name }}
+    labels:
+        pod-security.kubernetes.io/enforce: privileged
diff --git a/clabverter/test-fixtures/golden/simple-no-explicit-namespace/_topo01-ns.yaml b/clabverter/test-fixtures/golden/simple-no-explicit-namespace/_topo01-ns.yaml
@@ -3,3 +3,5 @@ apiVersion: v1
 kind: Namespace
 metadata:
     name: c9s-topo01
+    labels:
+        pod-security.kubernetes.io/enforce: privileged
diff --git a/clabverter/test-fixtures/golden/simple-no-explicit-namespace/topo01-ns.yaml b/clabverter/test-fixtures/golden/simple-no-explicit-namespace/topo01-ns.yaml
diff --git a/clabverter/test-fixtures/golden/simple/_topo01-ns.yaml b/clabverter/test-fixtures/golden/simple/_topo01-ns.yaml
@@ -3,3 +3,5 @@ apiVersion: v1
 kind: Namespace
 metadata:
     name: notclabernetes
+    labels:
+        pod-security.kubernetes.io/enforce: privileged
diff --git a/clabverter/test-fixtures/golden/simple/topo01-ns.yaml b/clabverter/test-fixtures/golden/simple/topo01-ns.yaml