rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(terraform): set ingress-nginx PodSecurity to privileged, keep TF-managed

Browse Source
This commit is contained in:
Story Crater Bot
2026-08-18 15:08:01 -07:00
parent f64fda297e
commit da0ec35f6c
1 changed files with 18 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/bootstrap-namespaces.tf
+18 -18
View File
@@ -1,22 +1,22 @@
locals {
namespaces = {
"cert-manager" = {}
"reloader" = {}
"ingress-nginx" = {}
"ddb" = {}
"iam" = {}
"storage" = {}
"logging" = {}
"monitoring" = {}
"cicd" = {}
"dashboard" = {}
"sqs" = {}
"temporal" = {}
"story-crater-backend" = {}
"llm" = {}
"dev-tools" = {}
"longhorn-system" = {}
"cilium-secrets" = {}
"cert-manager" = { pod_security = "baseline" }
"reloader" = { pod_security = "baseline" }
"ingress-nginx" = { pod_security = "privileged" }
"ddb" = { pod_security = "baseline" }
"iam" = { pod_security = "baseline" }
"storage" = { pod_security = "baseline" }
"logging" = { pod_security = "baseline" }
"monitoring" = { pod_security = "baseline" }
"cicd" = { pod_security = "baseline" }
"dashboard" = { pod_security = "baseline" }
"sqs" = { pod_security = "baseline" }
"temporal" = { pod_security = "baseline" }
"story-crater-backend" = { pod_security = "baseline" }
"llm" = { pod_security = "baseline" }
"dev-tools" = { pod_security = "baseline" }
"longhorn-system" = { pod_security = "baseline" }
"cilium-secrets" = { pod_security = "baseline" }
}
}
@@ -26,7 +26,7 @@ resource "kubernetes_namespace" "namespaces" {
metadata {
name = each.key
labels = {
"pod-security.kubernetes.io/enforce" = "baseline"
"pod-security.kubernetes.io/enforce" = each.value.pod_security
"pod-security.kubernetes.io/enforce-version" = "latest"
"pod-security.kubernetes.io/audit" = "restricted"
"pod-security.kubernetes.io/audit-version" = "latest"