openshift: add podSecurity labels

Openshift has pod security admission enabled by default. Adding the required labels.
projectcalico · Oct 27, 2023 · b46bacf · b46bacf
1 parent ab9e816
commit b46bacf
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/yaml/platforms/openshift/00-namespace-calico-vpp-dataplane.yaml b/yaml/platforms/openshift/00-namespace-calico-vpp-dataplane.yaml
@@ -7,3 +7,7 @@ metadata:
   labels:
     name: calico-vpp-dataplane
     openshift.io/run-level: "0"
+    security.openshift.io/scc.podSecurityLabelSync: "false"
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged