ContainerImage.Pinniped/test/deploy/tools/namespace.yaml

#! Copyright 2020-2022 the Pinniped contributors. All Rights Reserved.
#! SPDX-License-Identifier: Apache-2.0

---
apiVersion: v1
kind: Namespace
metadata:
  name: tools
  labels:
    # When deploying onto a cluster which has PSAs enabled by default for namespaces,
    # effectively disable them for this namespace. This namespace is only for integration
    # testing helper tools, and should never be deployed in production installs.
    pod-security.kubernetes.io/enforce: privileged
Make Pinniped compatible with Kube clusters which have enabled PSAs Where possible, use securityContext settings which will work with the most restrictive Pod Security Admission policy level (as of Kube 1.25). Where privileged containers are needed, use the namespace-level annotation to allow them. Also adjust some integration tests to make similar changes to allow the integration tests to pass on test clusters which use restricted PSAs. 2022-09-15 21:58:15 +00:00			`#! Copyright 2020-2022 the Pinniped contributors. All Rights Reserved.`
Rename dex namespace, add new ytt value to deploy/tools, and remove Tilt - Rename the test/deploy/dex directory to test/deploy/tools - Rename the dex namespace to tools - Add a new ytt value called `pinny_ldap_password` for the tools ytt templates - This new value is not used on main at this time. We intend to use it in the forthcoming ldap branch. We're defining it on main so that the CI scripts can use it across all branches and PRs. Signed-off-by: Ryan Richard <richardry@vmware.com> 2021-04-05 22:01:17 +00:00			`#! SPDX-License-Identifier: Apache-2.0`

			`---`
			`apiVersion: v1`
			`kind: Namespace`
			`metadata:`
			`name: tools`
Make Pinniped compatible with Kube clusters which have enabled PSAs Where possible, use securityContext settings which will work with the most restrictive Pod Security Admission policy level (as of Kube 1.25). Where privileged containers are needed, use the namespace-level annotation to allow them. Also adjust some integration tests to make similar changes to allow the integration tests to pass on test clusters which use restricted PSAs. 2022-09-15 21:58:15 +00:00			`labels:`
			`# When deploying onto a cluster which has PSAs enabled by default for namespaces,`
			`# effectively disable them for this namespace. This namespace is only for integration`
			`# testing helper tools, and should never be deployed in production installs.`
			`pod-security.kubernetes.io/enforce: privileged`