Extract the namespace override test out of the old lockdown test. (#145)

This patch removes the production bits of the old lockdown test and establishes the namespace override test as its own test. --------- Signed-off-by: Kevin Fox <[email protected]>
2023-03-21 22:13:26 +01:00
parent 4f85802ae0
commit d4fd2ced39
5 changed files with 24 additions and 6 deletions
@@ -0,0 +1,5 @@
+#!/bin/bash
+kubectl create namespace "spire-system"
+kubectl label namespace "spire-system" pod-security.kubernetes.io/enforce=privileged
+kubectl create namespace "spire-server"
+kubectl label namespace "spire-server" pod-security.kubernetes.io/enforce=restricted