934241a9b1
Deckhouse admission-policy-engine (baseline) rejected the pods because istio-init needs NET_ADMIN and NET_RAW. Label the namespace security.deckhouse.io/pod-policy=privileged like the other app namespaces in ugmk.
9 lines
150 B
YAML
9 lines
150 B
YAML
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: premises
|
|
labels:
|
|
istio-injection: enabled
|
|
security.deckhouse.io/pod-policy: privileged
|