search

Twingate / kubernetes-operator

Twingate Kubernetes Operator allows configuring Twingate using Kubernetes assets - OSS
https://www.twingate.com
Mozilla Public License 2.0
19 stars 1 forks source link

fix: Allow connectors to run under Restricted pod-security policy #329

Closed twingate-blee closed 2 weeks ago

twingate-blee commented 2 weeks ago

Related Tickets & Documents

Resolves #102

Changes

When testing setting pod-security to restricted

kubectl label --dry-run=server --overwrite ns twingate \
   pod-security.kubernetes.io/enforce=restricted \
   pod-security.kubernetes.io/enforce-version=latest
Warning: existing pods in namespace "twingate" violate the new PodSecurity enforce level "restricted:latest"
Warning: corp-connector-stg-1 (and 1 other pod): seccompProfile
namespace/twingate labeled (server dry run)

connectors are missing seccompProfile

Add required 

  seccompProfile:
    type: RuntimeDefault