Merge pull request #1573 from alphagov/set-licensify-PSS-restricted

Enforce PSS to restricted on Licensify
alphagov · Jan 22, 2025 · 6c6e517 · 6c6e517
2 parents 170e03d + f919702
commit 6c6e517
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform/deployments/cluster-services/argo.tf b/terraform/deployments/cluster-services/argo.tf
@@ -53,7 +53,7 @@ resource "kubernetes_namespace" "licensify" {
       # https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/deploy/pod_readiness_gate/
       "elbv2.k8s.aws/pod-readiness-gate-inject" = "enabled"
       "pod-security.kubernetes.io/audit"        = "restricted"
-      "pod-security.kubernetes.io/enforce"      = "baseline"
+      "pod-security.kubernetes.io/enforce"      = "restricted"
       "pod-security.kubernetes.io/warn"         = "restricted"
     }
   }