chore(ollama): set pod security standards

2025-12-03 20:32:16 +09:00
parent 6d34cba4ba
commit 227caca78c
2 changed files with 21 additions and 0 deletions
--- a/ollama/justfile
+++ b/ollama/justfile
@@ -29,6 +29,12 @@ create-namespace:
    if ! kubectl get namespace ${OLLAMA_NAMESPACE} &>/dev/null; then
        kubectl create namespace ${OLLAMA_NAMESPACE}
    fi
+    kubectl label namespace ${OLLAMA_NAMESPACE} \
+        pod-security.kubernetes.io/enforce=restricted \
+        pod-security.kubernetes.io/enforce-version=latest \
+        pod-security.kubernetes.io/warn=restricted \
+        pod-security.kubernetes.io/warn-version=latest \
+        --overwrite

 # Delete Ollama namespace
 delete-namespace: