Feature 10948: Set pod security label to helm EE namespaces

[osm/LCM.git] / osm_lcm / lcm_helm_conn.py

diff --git a/osm_lcm/lcm_helm_conn.py b/osm_lcm/lcm_helm_conn.py
index 30eba46..d7db639 100644 (file)
--- a/osm_lcm/lcm_helm_conn.py
+++ b/osm_lcm/lcm_helm_conn.py
@@ -432,6 +432,9 @@ class LCMHelmConn(N2VCConnector, LcmBase):
         await self._k8sclusterhelm3.create_namespace(
             namespace=name,
             cluster_uuid=system_cluster_uuid,
+            labels={
+                "pod-security.kubernetes.io/enforce": self.vca_config.eegrpc_pod_admission_policy
+            },
         )
         await self._k8sclusterhelm3.setup_default_rbac(
             name="ee-role",