diff --git a/infrastructure/cicd/tekton-helm/templates/namespace.yaml b/infrastructure/cicd/tekton-helm/templates/namespace.yaml index 7d75ca47..aa18fcc8 100644 --- a/infrastructure/cicd/tekton-helm/templates/namespace.yaml +++ b/infrastructure/cicd/tekton-helm/templates/namespace.yaml @@ -6,4 +6,7 @@ metadata: labels: app.kubernetes.io/name: {{ .Values.labels.app.name }} app.kubernetes.io/component: {{ .Values.labels.app.component }} -{{- end }} \ No newline at end of file + pod-security.kubernetes.io/enforce: baseline + pod-security.kubernetes.io/warn: baseline + pod-security.kubernetes.io/audit: baseline +{{- end }} diff --git a/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml b/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml index 3d53a89f..f2922843 100644 --- a/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml +++ b/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml @@ -12,12 +12,12 @@ metadata: spec: params: - name: git-repo-url - value: "{{"{{ .payload.repository.clone_url }}"}}" + value: $(body.repository.clone_url) - name: git-revision - value: "{{"{{ .payload.after }}"}}" + value: $(body.after) - name: git-branch - value: "{{"{{ .payload.ref }}" | replace "refs/heads/" "" | replace "refs/tags/" "" }}" + value: $(body.ref) - name: git-repo-name - value: "{{"{{ .payload.repository.name }}"}}" + value: $(body.repository.name) - name: git-repo-full-name - value: "{{"{{ .payload.repository.full_name }}"}}" \ No newline at end of file + value: $(body.repository.full_name) \ No newline at end of file