Merge pull request #1500 from alphagov/set-dgu-pss-baseline

Set DGU PSS to baseline
alphagov · Nov 8, 2024 · 657c686 · 657c686
2 parents 5e24361 + b9183ef
commit 657c686
Showing 1 changed file with 5 additions and 7 deletions.
diff --git a/terraform/deployments/datagovuk-infrastructure/argo_bootstrap.tf b/terraform/deployments/datagovuk-infrastructure/argo_bootstrap.tf
@@ -10,20 +10,18 @@ resource "helm_release" "argo_bootstrap" {
   })]
 }
 
-import {
-  to = kubernetes_namespace.datagovuk
-  id = "datagovuk"
-}
-
 resource "kubernetes_namespace" "datagovuk" {
   metadata {
     name = var.datagovuk_namespace
     annotations = {
       "argocd.argoproj.io/sync-options" = "ServerSideApply=true"
     }
     labels = {
-      "app.kubernetes.io/managed-by"  = "Terraform"
-      "argocd.argoproj.io/managed-by" = "cluster-services"
+      "app.kubernetes.io/managed-by"       = "Terraform"
+      "argocd.argoproj.io/managed-by"      = "cluster-services"
+      "pod-security.kubernetes.io/audit"   = "restricted"
+      "pod-security.kubernetes.io/enforce" = "baseline"
+      "pod-security.kubernetes.io/warn"    = "restricted"
     }
   }
 }