Enforce baseline Pod Security Standard with namespace labels

xrally / xrally-kubernetes

A set of xRally plugins to run workloads against Kubernetes platform.

Apache License 2.0

16 stars 8 forks source link

Enforce baseline Pod Security Standard with namespace labels #53

Closed collivier closed 9 months ago

collivier commented 9 months ago

It allows running the xrally_kubernetes testcases vs clusters where PodSecurityConfiguration enforces "restricted" [1]. Please note that Kubernetes.create_and_delete_pod_with_hostpath_volume even requests for privileged [2].

[1] https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/ [2] https://kubernetes.io/docs/concepts/storage/volumes/#hostpath