diff options
| author |   Cédric Ollivier <cedric.ollivier@orange.com> | 2024-01-13 11:35:36 +0100 |
|---|---|---|
| committer | Cédric Ollivier <cedric.ollivier@orange.com> | 2024-01-13 11:39:42 +0100 |
| commit | b89ef1032b4767c53c52669c86d2d00fcb445e7a (patch) | |
| tree | c83ef9c5a5cf206d8ef34ee2660bda8ca45b8bc7 /functest_kubernetes/ims | |
| parent | 39d9f6d9db305f34a6a717069d4b1f124c108a21 (diff) | |
Enforce baseline Pod Security Standard
It allows running both security and ims testcases vs clusters
where PodSecurityConfiguration enforces "restricted" [1].
[1] https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/
Change-Id: I9eb420cbb695ec8fb002f25cfd3c96ab50118fcc
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
(cherry picked from commit 553d57ffd4ff9c3c4f319454a4d190ac7aa4cc76)
Diffstat (limited to 'functest_kubernetes/ims')
| -rw-r--r-- | functest_kubernetes/ims/ims.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/functest_kubernetes/ims/ims.py b/functest_kubernetes/ims/ims.py index 9a7c6485..85b412fb 100644 --- a/functest_kubernetes/ims/ims.py +++ b/functest_kubernetes/ims/ims.py @@ -68,7 +68,8 @@ class Vims(testcase.TestCase): # pylint: disable=too-many-instance-attributes """ api_response = self.corev1.create_namespace( client.V1Namespace(metadata=client.V1ObjectMeta( - generate_name=self.ns_generate_name))) + generate_name=self.ns_generate_name, + labels={"pod-security.kubernetes.io/enforce": "baseline"}))) self.namespace = api_response.metadata.name self.__logger.debug("create_namespace: %s", api_response) self.zone = f'{self.namespace}.svc.cluster.local' |