fix: ns

kubernetes/hegira/apps/cert-manager/namespace.yaml

@@ -4,6 +4,10 @@ kind: Namespace
 metadata:
   name: cert-manager
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/databases/namespace.yaml

@@ -6,4 +6,8 @@ metadata:
   annotations:
     volsync.backube/privileged-movers: "true"
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled

kubernetes/hegira/apps/downloads/namespace.yaml

@@ -4,7 +4,9 @@ kind: Namespace
 metadata:
   name: downloads
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
-    routed-gateway: 'true'
+    routed-gateway: "true"
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/flux-system/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: flux-system
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/games/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: games
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/home-automation/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: home-automation
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/kube-system/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: kube-system
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/media/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: media
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/monitoring/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: monitoring
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/networking/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: networking
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/organizarrs/namespace.yaml

@@ -4,7 +4,9 @@ kind: Namespace
 metadata:
   name: organizarrs
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
-    routed-gateway: 'true'
+    routed-gateway: "true"
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/rook-ceph/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: rook-ceph
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/scripts/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: scripts
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/security/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: security
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/services/namespace.yaml

@@ -4,7 +4,9 @@ kind: Namespace
 metadata:
   name: services
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
-    routed-gateway: 'true'
+    routed-gateway: "true"
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/system-controllers/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: system-controllers
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
     k8tz.io/controller-namespace: "true"
   annotations:

kubernetes/hegira/apps/volsync/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: volsync
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"

kubernetes/hegira/apps/vpn/namespace.yaml

@@ -4,6 +4,8 @@ kind: Namespace
 metadata:
   name: vpn
   labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
     volsync.backube/privileged-movers: "true"