pod-security

argocd/apps/anyllm/anyllm.yaml

@@ -39,6 +39,9 @@ spec:
     server: 'https://kubernetes.default.svc'
     namespace: anyllm
   syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: "privileged"
     automated:
       selfHeal: true
       prune: true