From 7a681186d799dfe521b2e092e84a23c756d23fc8 Mon Sep 17 00:00:00 2001 From: Sergiusz Urbaniak Date: Fri, 1 Oct 2021 10:50:17 +0200 Subject: [PATCH] podsecurity: enforce privileged for openshift-monitoring namespace --- .../0000_50_cluster-monitoring-operator_01-namespace.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/manifests/0000_50_cluster-monitoring-operator_01-namespace.yaml b/manifests/0000_50_cluster-monitoring-operator_01-namespace.yaml index 3f41c734e1..40daa142fe 100644 --- a/manifests/0000_50_cluster-monitoring-operator_01-namespace.yaml +++ b/manifests/0000_50_cluster-monitoring-operator_01-namespace.yaml @@ -12,6 +12,9 @@ metadata: openshift.io/cluster-monitoring: "true" name: openshift-monitoring network.openshift.io/policy-group: monitoring + pod-security.kubernetes.io/enforce: privileged + pod-security.kubernetes.io/audit: privileged + pod-security.kubernetes.io/warn: privileged --- apiVersion: v1 kind: Namespace