mirror of
https://github.com/ghndrx/k8s-manifests.git
synced 2026-02-10 06:45:09 +00:00
Greg Hendrickson
ef86c1a6c7
- Namespace with Pod Security Standards restricted enforcement - Deployment with full security context (non-root, read-only fs, no caps) - Resource limits, health probes, topology spread - Service and comprehensive README - Kustomize structure for overlay-based customization
14 lines
520 B
YAML
14 lines
520 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: app-production
|
|
labels:
|
|
# Pod Security Standards - enforce restricted profile
|
|
# See: https://kubernetes.io/docs/concepts/security/pod-security-standards/
|
|
pod-security.kubernetes.io/enforce: restricted
|
|
pod-security.kubernetes.io/enforce-version: latest
|
|
pod-security.kubernetes.io/audit: restricted
|
|
pod-security.kubernetes.io/audit-version: latest
|
|
pod-security.kubernetes.io/warn: restricted
|
|
pod-security.kubernetes.io/warn-version: latest
|