Test that it is possible to lock down security of pods (#84)

2023-03-11 12:11:19 +01:00
parent bfeb217558
commit b6716aee17
3 changed files with 79 additions and 0 deletions
@@ -0,0 +1,5 @@
+#!/bin/bash
+kubectl label namespace "$scenario" pod-security.kubernetes.io/enforce=privileged
+kubectl create namespace "${scenario}-deps"
+kubectl label namespace "${scenario}-deps" pod-security.kubernetes.io/enforce=restricted
+helm install -n "${scenario}-deps" spire -f "${TEST_DIR}"/deps-values.yaml