Repository for dip
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tenant-catalog/kubeflow/experimental/security/PSS/dynamic/baseline/namespace-labels.yaml

23 lines
1.1 KiB

# This file is a duplicate of apps/profiles/upstream/base/namespace-labels.yaml
# as using only the required label to merge it with the existing config map of profiles
# deployment to enable PSS for profile namespaces, leads to creation of a new config map
# with just the PSS label and replaces the pre-exisiting labels in the deployed config map.
# Below is a list of labels to be set by default.
#
# To add a namespace label, use `key: 'value'`, for example:
# istio.io/rev: 'asm-191-1'
#
# To remove a namespace label, use `key: ''`. For example:
# istio-injection: ''
#
# Profile controller will not replace a namespace label if its key already
# exists. If you want to override the value of a previously applied label, you
# need to:
# 1. Remove the label by using `key: ''` and deploy.
# 2. Add the label by using `key: 'value'` and deploy.
#
katib.kubeflow.org/metrics-collector-injection: "enabled"
serving.kubeflow.org/inferenceservice: "enabled"
pipelines.kubeflow.org/enabled: "true"
app.kubernetes.io/part-of: "kubeflow-profile"
pod-security.kubernetes.io/enforce: "baseline"