config

argocd/apps/penpot/penpot.yaml

@@ -44,9 +44,9 @@ spec:
     namespace: penpot
   syncPolicy:
     automated:
+      managedNamespaceMetadata:
+        labels: pod-security.kubernetes.io/enforce=privileged
       selfHeal: true
       prune: true
     syncOptions:
-      - CreateNamespace=true
+      - CreateNamespace=true
-    addLabels:
-        - pod-security.kubernetes.io/enforce=privileged