Merge pull request #31 from ministryofjustice/add-audit-privileged-label

chore: 🤖 turn on psa in audit mode
ministryofjustice · Oct 10, 2023 · 0ec0c26 · 0ec0c26
2 parents 9a6676f + 11bc20d
commit 0ec0c26
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -21,6 +21,7 @@ resource "kubernetes_namespace" "kuberos" {
       "name"                                           = "kuberos"
       "cloud-platform.justice.gov.uk/environment-name" = "production"
       "cloud-platform.justice.gov.uk/is-production"    = "true"
+      "pod-security.kubernetes.io/audit"               = "privileged"
     }
 
     annotations = {
@@ -56,12 +57,12 @@ resource "helm_release" "kuberos" {
   })]
 
   set_sensitive {
-    name = "oidc.clientId"
+    name  = "oidc.clientId"
     value = var.oidc_kubernetes_client_id
   }
 
   set_sensitive {
-    name = "oidc.clientSecret"
+    name  = "oidc.clientSecret"
     value = var.oidc_kubernetes_client_secret
   }
   lifecycle {