Skip to content

Commit 11d243a

Browse files
authored
chore(module): temporarily disable restricted security policies (#2062)
Signed-off-by: Ivan Mikheykin <ivan.mikheykin@flant.com>
1 parent 644c4c5 commit 11d243a

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

templates/namespace.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,10 @@ d8-{{ .Chart.Name }}
44

55
{{- define "namespace.labels" }}
66
prometheus.deckhouse.io/rules-watcher-enabled: "true"
7+
{{- end }}
8+
9+
{{/* add these labels back to namespace.labels when fix templates for privileged Pods */}}
10+
{{- define "namespace.labels.disabled.temporarily" }}
711
security.deckhouse.io/pod-policy: "restricted"
812
security.deckhouse.io/enable-security-policy-check: "true"
913
{{- end }}

0 commit comments

Comments
 (0)