Move dynamic PSS baseline patch to apps/profiles/#3157
Conversation
Signed-off-by: Harshvir Potpose <hpotpose62@gmail.com>
akagami-harsh
force-pushed
the
refactor-pss-baseline
branch
from
5b2b4fd to
bd67e60
Compare
|
|
||
| resources: | ||
| - ../../../../../apps/profiles/upstream/overlays/kubeflow | ||
| - ../upstream/overlays/kubeflow |
There was a problem hiding this comment.
This file must then be used in the /example/kustomization.yaml as well
| # deployment to enable PSS for profile namespaces, leads to creation of a new config map | ||
| # with just the PSS label and replaces the pre-exisiting labels in the deployed config map. | ||
| # PSS (Pod Security Standards) overlay for Kubeflow profiles | ||
| # This file extends the base namespace-labels.yaml with PSS baseline label |
There was a problem hiding this comment.
Please again link apps/profiles/upstream/base/namespace-labels.yaml
|
I think you have to update the GHA workflows "Error: must build at directory: not a valid directory: evalsymlink failure on 'experimental/security/PSS/dynamic/baseline' : lstat /home/runner/work/manifests/manifests/experimental/security/PSS/dynamic/baseline: no such file or directory" |
Signed-off-by: Harshvir Potpose <hpotpose62@gmail.com>
Signed-off-by: Harshvir Potpose <hpotpose62@gmail.com>
Signed-off-by: Harshvir Potpose <hpotpose62@gmail.com>
|
Thank you /lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: juliusvonkohout The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
2 participants
Pull Request Template for Kubeflow Manifests
✏️ Summary of Changes
📦 Dependencies
🐛 Related Issues
✅ Contributor Checklist