Skip to content

Commit f86d3f4

Browse files
🐛 (fix) PSA enforcement: Move from baseline to restricted
Namespaces should be restricted by default rather than granted additional, unnecessary permissions.
1 parent c899dc1 commit f86d3f4

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

config/base/common/namespace.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,6 @@ kind: Namespace
33
metadata:
44
labels:
55
app.kubernetes.io/part-of: olm
6-
pod-security.kubernetes.io/enforce: baseline
6+
pod-security.kubernetes.io/enforce: restricted
77
pod-security.kubernetes.io/enforce-version: "v1.32"
88
name: system

0 commit comments

Comments
 (0)