Use restricted namespace for opensource apiserver - Githubissues

tigera / operator

Kubernetes operator for installing Calico and Calico Enterprise

Apache License 2.0

182 stars 138 forks source link

Use restricted namespace for opensource apiserver #3489

Open mihivagyok opened 1 week ago

mihivagyok commented 1 week ago

Description

the opensource calico-apiserver is now running as a non-root container, however the calico-apiserver namespace has privileged labels which is not necessary
the calico-apiserver pods are happy with the restricted namespace label

For PR author

[ ] Tests for change.
[ ] If changing pkg/apis/, run make gen-files
[ ] If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

[ ] Milestone set according to targeted release.
[ ] Appropriate labels:
- kind/bug if this is a bugfix.
- kind/enhancement if this is a a new feature.
- enterprise if this PR applies to Calico Enterprise only.