Skip to content
Snippets Groups Projects
Unverified Commit a962fa23 authored by Ugur Can Ozturk's avatar Ugur Can Ozturk Committed by GitHub
Browse files

[podSecurityConfiguration]: fix apiVersion and change default policy versions (#10210)


Signed-off-by: default avatarUgur <ugurozturk918@gmail.com>
parent 775851b0
No related branches found
No related tags found
No related merge requests found
...@@ -106,11 +106,11 @@ kube_apiserver_admission_event_rate_limits: {} ...@@ -106,11 +106,11 @@ kube_apiserver_admission_event_rate_limits: {}
kube_pod_security_use_default: false kube_pod_security_use_default: false
kube_pod_security_default_enforce: baseline kube_pod_security_default_enforce: baseline
kube_pod_security_default_enforce_version: latest kube_pod_security_default_enforce_version: "{{ kube_major_version }}"
kube_pod_security_default_audit: restricted kube_pod_security_default_audit: restricted
kube_pod_security_default_audit_version: latest kube_pod_security_default_audit_version: "{{ kube_major_version }}"
kube_pod_security_default_warn: restricted kube_pod_security_default_warn: restricted
kube_pod_security_default_warn_version: latest kube_pod_security_default_warn_version: "{{ kube_major_version }}"
kube_pod_security_exemptions_usernames: [] kube_pod_security_exemptions_usernames: []
kube_pod_security_exemptions_runtime_class_names: [] kube_pod_security_exemptions_runtime_class_names: []
kube_pod_security_exemptions_namespaces: kube_pod_security_exemptions_namespaces:
......
{% if kube_pod_security_use_default %} {% if kube_pod_security_use_default %}
apiVersion: pod-security.admission.config.k8s.io/v1beta1 apiVersion: pod-security.admission.config.k8s.io/v1
kind: PodSecurityConfiguration kind: PodSecurityConfiguration
defaults: defaults:
enforce: "{{ kube_pod_security_default_enforce }}" enforce: "{{ kube_pod_security_default_enforce }}"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment