shipwright-io/operator

Enable PodSecurity Plugin for KinD Tests

adambkaplan opened this issue · 2 comments

adambkaplan commented

When running the operator e2e tests on a KinD cluster, we should do the following:

  1. Enable the PodSecurity admission plugin
  2. Run the operator in a namespace that enforces a non-privileged security profile.

Ideally the operator should run in a namespace with the restricted profile enforced.

This requires the operator to run on a cluster with Kubernetes 1.22 or higher.

Originally posted by @gabemontero in #28 (comment)

adambkaplan commented

Note that with #56, we can bump our k8s e2e test version to 1.22 or 1.23

adambkaplan commented

This is now obsolete - PodSecurity Admission graduated to stable in k8s 1.25 (on by default)