934241a9b1
Deckhouse admission-policy-engine (baseline) rejected the pods because istio-init needs NET_ADMIN and NET_RAW. Label the namespace security.deckhouse.io/pod-policy=privileged like the other app namespaces in ugmk.
15 lines
283 B
YAML
15 lines
283 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- ../base
|
|
- kafka-ca-configmap.yaml
|
|
patches:
|
|
- path: namespace.yaml
|
|
target:
|
|
kind: Namespace
|
|
name: premises
|
|
- path: backend.yaml
|
|
target:
|
|
kind: HelmRelease
|
|
name: backend
|