k3s/tests/docker/hardened/cluster-level-pss.yaml
Derek Nola 793d216d02 Migrate hardened docker test
Signed-off-by: Derek Nola <derek.nola@suse.com>
2025-02-12 14:27:26 -08:00

18 lines
483 B
YAML

apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- name: PodSecurity
configuration:
apiVersion: pod-security.admission.config.k8s.io/v1beta1
kind: PodSecurityConfiguration
defaults:
enforce: "privileged"
enforce-version: "latest"
audit: "baseline"
audit-version: "latest"
warn: "baseline"
warn-version: "latest"
exemptions:
usernames: []
runtimeClasses: []
namespaces: [kube-system]