-
Notifications
You must be signed in to change notification settings - Fork 140
Defaults matching PSS restricted #147
Copy link
Copy link
Open
Labels
kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.
Metadata
Metadata
Assignees
Labels
kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.Indicates that an issue or PR should not be auto-closed due to staleness.
While this runs inside
kube-systemin many cases, it would be nice if the defaults for the deployment met the restricted context. The helm chart currently has a number of these commented out.https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted