fix/psa-labels: opct-11 apply privileged labels to NS (#41)

redhat-openshift-ecosystem · Jan 24, 2023 · 3fe6c15 · 3fe6c15
1 parent d6552ec
commit 3fe6c15
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/types.go b/pkg/types.go
@@ -17,5 +17,11 @@ var (
 	SonobuoyDefaultLabels = map[string]string{
 		SonobuoyLabelComponentName: SonobuoyLabelComponentValue,
 		SonobuoyLabelNamespaceName: CertificationNamespace,
+		// Enforcing privileged mode for PSA on Conformance/Sonobuoy environment.
+		// https://issues.redhat.com/browse/OPCT-11
+		// https://issues.redhat.com/browse/OPCT-31
+		"pod-security.kubernetes.io/enforce": "privileged",
+		"pod-security.kubernetes.io/audit":   "privileged",
+		"pod-security.kubernetes.io/warn":    "privileged",
 	}
 )