add PSA restricted label

and seLinux
tektoncd · Sep 22, 2022 · 040f93e · 040f93e
1 parent 7fda7ea
commit 040f93e
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 2 deletions.
diff --git a/config/100-namespace/100-namespace.yaml b/config/100-namespace/100-namespace.yaml
@@ -19,3 +19,4 @@ metadata:
   labels:
     app.kubernetes.io/instance: default
     app.kubernetes.io/part-of: tekton-pipelines
+    pod-security.kubernetes.io/enforce : restricted
diff --git a/config/controller.yaml b/config/controller.yaml
@@ -156,6 +156,9 @@ spec:
         - name: config-registry-cert
           configMap:
             name: config-registry-cert
+      securityContext:
+        seLinuxOptions:
+          role: "RunAsUser"
 ---
 apiVersion: v1
 kind: Service

diff --git a/config/webhook.yaml b/config/webhook.yaml
@@ -140,6 +140,9 @@ spec:
           initialDelaySeconds: 5
           periodSeconds: 10
           timeoutSeconds: 5
+      securityContext:
+        seLinuxOptions:
+          role: "RunAsUser"
 ---
 apiVersion: v1
 kind: Service

diff --git a/licenseclassifier b/licenseclassifier
diff --git a/test-in b/test-in