Merge pull request #2557 from ministryofjustice/disable-gatekeeper-psp

chore: 🤖 update psa labels and enable constraint to require label
ministryofjustice · Nov 7, 2023 · a3a425f · a3a425f
2 parents 2269272 + d002b14
commit a3a425f
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/terraform/aws-accounts/cloud-platform-aws/vpc/eks/components/components.tf b/terraform/aws-accounts/cloud-platform-aws/vpc/eks/components/components.tf
@@ -34,7 +34,7 @@ module "concourse" {
 }
 
 module "cluster_autoscaler" {
-  source = "github.com/ministryofjustice/cloud-platform-terraform-cluster-autoscaler?ref=1.5.4"
+  source = "github.com/ministryofjustice/cloud-platform-terraform-cluster-autoscaler?ref=1.5.5"
 
   enable_overprovision        = lookup(local.prod_workspace, terraform.workspace, false)
   cluster_domain_name         = data.terraform_remote_state.cluster.outputs.cluster_domain_name
@@ -83,7 +83,7 @@ module "external_dns" {
 }
 
 module "external_secrets_operator" {
-  source                      = "github.com/ministryofjustice/cloud-platform-terraform-external-secrets-operator?ref=0.0.4"
+  source                      = "github.com/ministryofjustice/cloud-platform-terraform-external-secrets-operator?ref=0.0.5"
   dependence_prometheus       = module.monitoring.prometheus_operator_crds_status
   cluster_domain_name         = data.terraform_remote_state.cluster.outputs.cluster_domain_name
   eks_cluster_oidc_issuer_url = data.terraform_remote_state.cluster.outputs.cluster_oidc_issuer_url
@@ -175,7 +175,7 @@ module "monitoring" {
 }
 
 module "gatekeeper" {
-  source     = "github.com/ministryofjustice/cloud-platform-terraform-gatekeeper?ref=1.8.0"
+  source     = "github.com/ministryofjustice/cloud-platform-terraform-gatekeeper?ref=1.9.0"
   depends_on = [module.monitoring, module.modsec_ingress_controllers_v1, module.cert_manager]
 
   dryrun_map = {
@@ -189,7 +189,7 @@ module "gatekeeper" {
     external_dns_weight                = terraform.workspace == "live" ? false : true,
     valid_hostname                     = lookup(local.prod_2_workspace, terraform.workspace, false),
     warn_service_account_secret_delete = false,
-    user_ns_requires_psa_label         = true
+    user_ns_requires_psa_label         = false
   }
 
   cluster_domain_name                  = data.terraform_remote_state.cluster.outputs.cluster_domain_name
@@ -229,7 +229,7 @@ module "velero" {
 }
 
 module "kuberhealthy" {
-  source = "github.com/ministryofjustice/cloud-platform-terraform-kuberhealthy?ref=1.2.6"
+  source = "github.com/ministryofjustice/cloud-platform-terraform-kuberhealthy?ref=1.2.7"
 
   dependence_prometheus = module.monitoring.prometheus_operator_crds_status
 }