Skip to content

Commit 7c10fb9

Browse files
🐛 (fix) PSA enforcement: Move from baseline to restricted
Namespaces should be restricted by default rather than granted additional, unnecessary permissions.
1 parent 97b1337 commit 7c10fb9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

config/base/common/namespace.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,6 @@ kind: Namespace
33
metadata:
44
labels:
55
app.kubernetes.io/part-of: olm
6-
pod-security.kubernetes.io/enforce: baseline
6+
pod-security.kubernetes.io/enforce: restricted
77
pod-security.kubernetes.io/enforce-version: latest
88
name: system

0 commit comments

Comments
 (0)