From 98348e2a698fbd085706d5dafb1683f16de7fda7 Mon Sep 17 00:00:00 2001
From: Masaki Yatsu <yatsu@yatsu.info>
Date: Sun, 23 Nov 2025 00:45:43 +0900
Subject: [PATCH] chore: set pod security standard to image registry

---
 k8s/justfile | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/k8s/justfile b/k8s/justfile
index eea7934..3585223 100644
--- a/k8s/justfile
+++ b/k8s/justfile
@@ -54,6 +54,9 @@ install:
         # Deploy Docker registry to cluster
         kubectl apply -f ./registry/registry.yaml
 
+        # Set Pod Security Standard for registry namespace
+        kubectl label namespace registry pod-security.kubernetes.io/enforce=restricted --overwrite
+
         # Wait for registry deployment
         echo "Waiting for registry to be ready..."
         kubectl wait --for=condition=available --timeout=60s deployment/registry -n registry
@@ -305,6 +308,9 @@ deploy-registry:
 
     kubectl apply -f ./registry/registry.yaml
 
+    # Set Pod Security Standard for registry namespace
+    kubectl label namespace registry pod-security.kubernetes.io/enforce=restricted --overwrite
+
     echo "Waiting for registry to be ready..."
     kubectl wait --for=condition=available --timeout=60s deployment/registry -n registry
     echo "✓ Registry deployed and ready"