invalid location for assignmetadata na-assign-label-podsecurity: metadata.labels.pod-security."kubernetes.io/enforce"

[papanito]

What steps did you take and what happened:
[A clear and concise description of what the bug is.]

I apply the following yaml file

apiVersion: mutations.gatekeeper.sh/v1alpha1
kind: AssignMetadata
metadata:
  name: na-assign-label-podsecurity
spec:
  match:
    scope: Cluster
    kinds:
      - apiGroups: ["*"]
        kinds: ["Namespace"]
  location: 'metadata.labels.pod-security."kubernetes.io/enforce"'
  parameters:
    assign:
      value: "restricted"

I will get this error:

invalid location for assignmetadata na-assign-label-podsecurity: metadata.labels.pod-security."kubernetes.io/enforce"

What did you expect to happen:

No Errors

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

N/A

Environment:

• Gatekeeper version: 3.10.0
• Kubernetes version: (use kubectl version): 1.26.6

[ritazh]

Can you try

‘metadata.labels.”pod-security.kubernetes.io/enforce"'

[papanito]

Thanks @ritazh that did the trick, now it works

[ritazh]

Glad it worked for you!

[djsly]

just stumbled on this problem, I was looking for the format, it might be good to update the DOC with this example maybe ?

https://open-policy-agent.github.io/gatekeeper/website/docs/mutation/