From 3cdcd10dc53d12f267c588a3cbd1baa341b2b260 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Sun, 3 Oct 2021 15:23:23 +0200
Subject: [PATCH] calico: Fix operator namespace creation
---
infrastructure/kyverno/deny-system-namespaces.yaml | 1 +
1 file changed, 1 insertion(+)
diff --git a/infrastructure/kyverno/deny-system-namespaces.yaml b/infrastructure/kyverno/deny-system-namespaces.yaml
index 388ef889a..cda26c8a7 100644
--- a/infrastructure/kyverno/deny-system-namespaces.yaml
+++ b/infrastructure/kyverno/deny-system-namespaces.yaml
@@ -15,6 +15,7 @@ spec:
exclude:
clusterRoles:
- cluster-admin
+ - tigera-operator
validate:
message: "Creating *-system namespaces is not allowed."
deny: {}
--
GitLab