fix(bootstrap): correct cluster config + complete Phase4 ArgoCD bootstrap permanent fixes

2026-08-18 15:08:03 -07:00
parent aea48deb99
commit 5b3307ffee
19 changed files with 520 additions and 382 deletions
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cicd
+  labels:
+    # Baseline allows most workloads while blocking clearly dangerous configurations
+    # Redis needs some relaxed settings but doesn't need full privileged access
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/audit: baseline
+    pod-security.kubernetes.io/warn: baseline