🌱 Enforce restricted pod security standards

lentzi90 commented 6 months ago

We should be able to run with the restricted policy and this will inprove our security.

What this PR does / why we need it:

This enforces the restricted pod security standards profile. It ensures that we do not run containers as root or privileged for example. In a way it can be seen as a validation that we actually configure CAPO according to security best practices.

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged): Fixes #

Special notes for your reviewer:

Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.
I was a bit unsure what icon to use for this actually but went with :seedling: eventually. It could be seen as breaking for user that modify the CAPO deployment or runs other workload in the namespace, but I would say that is outside of normal usage.

TODOs:

[x] squashed commits
if necessary:
- [ ] includes documentation
- [ ] adds unit tests

/hold

k8s-ci-robot commented 6 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lentzi90

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-sigs/cluster-api-provider-openstack/blob/main/OWNERS)~~ [lentzi90] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

netlify[bot] commented 6 months ago

Deploy Preview for kubernetes-sigs-cluster-api-openstack ready!

Name	Link
Latest commit	3121d3ae5ae13a37304afc9903a4fe5ffc5098a0
Latest deploy log	https://app.netlify.com/sites/kubernetes-sigs-cluster-api-openstack/deploys/65d4957ff65db60008b24e93
Deploy Preview	https://deploy-preview-1895--kubernetes-sigs-cluster-api-openstack.netlify.app
Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

EmilienM commented 6 months ago

/lgtm Thanks!

EmilienM commented 6 months ago

/hold cancel

lentzi90 commented 6 months ago

/hold cancel

kubernetes-sigs / cluster-api-provider-openstack