From 8d975d53872c90baea18df01a82e73cb3fc9e27e Mon Sep 17 00:00:00 2001
From: Ricardo Katz <ricardo.katz@gmail.com>
Date: Thu, 2 Nov 2023 19:43:26 -0300
Subject: [PATCH] Use PSA on deploy scripts

---
 deploy/static/provider/aws/deploy.yaml                          | 1 +
 deploy/static/provider/aws/nlb-with-tls-termination/deploy.yaml | 1 +
 deploy/static/provider/baremetal/deploy.yaml                    | 1 +
 deploy/static/provider/cloud/deploy.yaml                        | 1 +
 deploy/static/provider/do/deploy.yaml                           | 1 +
 deploy/static/provider/exoscale/deploy.yaml                     | 1 +
 deploy/static/provider/kind/deploy.yaml                         | 1 +
 deploy/static/provider/oracle/deploy.yaml                       | 1 +
 deploy/static/provider/scw/deploy.yaml                          | 1 +
 hack/manifest-templates/common/namespace.yaml                   | 1 +
 10 files changed, 10 insertions(+)

diff --git a/deploy/static/provider/aws/deploy.yaml b/deploy/static/provider/aws/deploy.yaml
index 356967315..72c8368cd 100644
--- a/deploy/static/provider/aws/deploy.yaml
+++ b/deploy/static/provider/aws/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/aws/nlb-with-tls-termination/deploy.yaml b/deploy/static/provider/aws/nlb-with-tls-termination/deploy.yaml
index a5d179953..3fbbc6460 100644
--- a/deploy/static/provider/aws/nlb-with-tls-termination/deploy.yaml
+++ b/deploy/static/provider/aws/nlb-with-tls-termination/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/baremetal/deploy.yaml b/deploy/static/provider/baremetal/deploy.yaml
index 42fcb3250..8616c2efc 100644
--- a/deploy/static/provider/baremetal/deploy.yaml
+++ b/deploy/static/provider/baremetal/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/cloud/deploy.yaml b/deploy/static/provider/cloud/deploy.yaml
index 6844384b1..79d3dceaa 100644
--- a/deploy/static/provider/cloud/deploy.yaml
+++ b/deploy/static/provider/cloud/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/do/deploy.yaml b/deploy/static/provider/do/deploy.yaml
index 322e5788c..2bb143ebe 100644
--- a/deploy/static/provider/do/deploy.yaml
+++ b/deploy/static/provider/do/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/exoscale/deploy.yaml b/deploy/static/provider/exoscale/deploy.yaml
index 5112ac3cf..34aa437fa 100644
--- a/deploy/static/provider/exoscale/deploy.yaml
+++ b/deploy/static/provider/exoscale/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/kind/deploy.yaml b/deploy/static/provider/kind/deploy.yaml
index f53d4bb80..dbb49414a 100644
--- a/deploy/static/provider/kind/deploy.yaml
+++ b/deploy/static/provider/kind/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/oracle/deploy.yaml b/deploy/static/provider/oracle/deploy.yaml
index 2205c5293..431c61936 100644
--- a/deploy/static/provider/oracle/deploy.yaml
+++ b/deploy/static/provider/oracle/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/deploy/static/provider/scw/deploy.yaml b/deploy/static/provider/scw/deploy.yaml
index e08ebc990..1a87bf184 100644
--- a/deploy/static/provider/scw/deploy.yaml
+++ b/deploy/static/provider/scw/deploy.yaml
@@ -4,6 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: ingress-nginx
     app.kubernetes.io/name: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline
   name: ingress-nginx
 ---
 apiVersion: v1
diff --git a/hack/manifest-templates/common/namespace.yaml b/hack/manifest-templates/common/namespace.yaml
index db890604b..722d02f0f 100644
--- a/hack/manifest-templates/common/namespace.yaml
+++ b/hack/manifest-templates/common/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   labels:
     app.kubernetes.io/name: ingress-nginx
     app.kubernetes.io/instance: ingress-nginx
+    pod-security.kubernetes.io/enforce: baseline