From c351a1c3d66500b6046f8c326e337edfb4e25b0f Mon Sep 17 00:00:00 2001
From: Scott Sorell <scott.sorell@gmail.com>
Date: Fri, 9 Oct 2026 10:50:31 -0600
Subject: [PATCH] Allow privileged infrastructure chart namespaces

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 bootstrap/applicationsets/01-infrastructure-appset.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bootstrap/applicationsets/01-infrastructure-appset.yaml b/bootstrap/applicationsets/01-infrastructure-appset.yaml
index 44bd851..3505112 100644
--- a/bootstrap/applicationsets/01-infrastructure-appset.yaml
+++ b/bootstrap/applicationsets/01-infrastructure-appset.yaml
@@ -34,5 +34,10 @@ spec:
         automated:
           prune: true
           selfHeal: true
+        managedNamespaceMetadata:
+          labels:
+            pod-security.kubernetes.io/enforce: privileged
+            pod-security.kubernetes.io/audit: privileged
+            pod-security.kubernetes.io/warn: privileged
         syncOptions:
           - CreateNamespace=true