Label neuvector namespace

MozeBaltyk · May 30, 2024 · d37e3a8 · d37e3a8
1 parent 6555692
commit d37e3a8
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/roles/deploy_neuvector/tasks/deploy.yml b/roles/deploy_neuvector/tasks/deploy.yml
@@ -1,4 +1,19 @@
 ---
+# Common
+- name: "Deploy Neuvector"
+  run_once: true
+  become: true
+  become_user: "{{ admin_user }}"
+  become_method: ansible.builtin.sudo
+  become_flags: "-i"
+  block:
+    - name: Create an Label namespace
+      ansible.builtin.shell: >
+        export KUBECONFIG=/home/{{ admin_user }}/.kube/{{ inventory_hostname }}.yaml;
+        kubectl create namespace neuvector;
+        kubectl label  namespace neuvector "pod-security.kubernetes.io/enforce=privileged";
+      changed_when: false
+
 # Airgap
 - name: "Deploy Neuvector"
   run_once: true