11 lines
370 B
YAML
11 lines
370 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: security-audit
|
|
labels:
|
|
# hostPath (/var/log/audit, чекпоинты) запрещён профилем baseline — нужен privileged.
|
|
pod-security.kubernetes.io/enforce: privileged
|
|
pod-security.kubernetes.io/warn: baseline
|
|
pod-security.kubernetes.io/audit: baseline
|
|
istio-injection: disabled
|