From b424f2972fa5f7b20da9512abef4342f873c04b3 Mon Sep 17 00:00:00 2001 From: Valentin Haudiquet Date: Thu, 9 Jul 2026 19:54:13 +0200 Subject: [PATCH] vhaudiquet.fr: update namespace to allow privileged container --- .github/dependabot.yml | 1 + kubernetes/production/vhaudiquet-fr/namespace.yaml | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7fa704c..f732af0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -58,6 +58,7 @@ updates: - "/kubernetes/system/coredns" - "/kubernetes/system/csi-driver-nfs" - "/kubernetes/system/external-dns" + - "/kubernetes/system/longhorn" - "/kubernetes/system/traefik" - "/kubernetes/tools/dashy" - "/kubernetes/tools/glance" diff --git a/kubernetes/production/vhaudiquet-fr/namespace.yaml b/kubernetes/production/vhaudiquet-fr/namespace.yaml index 55afcb3..9421f77 100644 --- a/kubernetes/production/vhaudiquet-fr/namespace.yaml +++ b/kubernetes/production/vhaudiquet-fr/namespace.yaml @@ -2,3 +2,7 @@ apiVersion: v1 kind: Namespace metadata: name: vhaudiquet-fr + labels: + pod-security.kubernetes.io/enforce: privileged + pod-security.kubernetes.io/audit: privileged + pod-security.kubernetes.io/warn: privileged