mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2025-12-14 05:45:06 +03:00
7cb6b07c44
Fixes a bug where `kube-apiserver` fails to start if the PodSecurity configuration file doesn't have the `apiVersion` and `kind` keys. Signed-off-by: Alejandro Macedo <alex.macedopereira@gmail.com> Co-authored-by: Alejandro Macedo <alex.macedopereira@gmail.com>
18 lines
842 B
Django/Jinja
18 lines
842 B
Django/Jinja
apiVersion: pod-security.admission.config.k8s.io/v1
|
|
kind: PodSecurityConfiguration
|
|
{% if kube_pod_security_use_default %}
|
|
defaults:
|
|
enforce: "{{ kube_pod_security_default_enforce }}"
|
|
enforce-version: "{{ kube_pod_security_default_enforce_version }}"
|
|
audit: "{{ kube_pod_security_default_audit }}"
|
|
audit-version: "{{ kube_pod_security_default_audit_version }}"
|
|
warn: "{{ kube_pod_security_default_warn }}"
|
|
warn-version: "{{ kube_pod_security_default_warn_version }}"
|
|
exemptions:
|
|
usernames: {{ kube_pod_security_exemptions_usernames | to_json }}
|
|
runtimeClasses: {{ kube_pod_security_exemptions_runtime_class_names | to_json }}
|
|
namespaces: {{ kube_pod_security_exemptions_namespaces | to_json }}
|
|
{% else %}
|
|
# This file is intentinally left empty as kube_pod_security_use_default={{ kube_pod_security_use_default }}
|
|
{% endif %}
|