pod security - privileged

argocd/apps/minio/minio.yaml

@@ -45,18 +45,20 @@ spec:
         - name: apiIngress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
           value: 'true'
           forceString: true
-        - name: containerSecurityContext.allowPrivilegeEscalation
-          value: 'false'
-        - name: containerSecurityContext.capabilities.drop
-          value: 'ALL'
-        - name: containerSecurityContext.runAsNonRoot
-          value: 'true'
-        - name: containerSecurityContext.seccompProfile.type
-          value: 'RuntimeDefault'
+#        - name: containerSecurityContext.allowPrivilegeEscalation
+#          value: 'false'
+#        - name: containerSecurityContext.capabilities.drop
+#          value: 'ALL'
+#        - name: containerSecurityContext.runAsNonRoot
+#          value: 'true'
+#        - name: containerSecurityContext.seccompProfile.type
+#          value: 'RuntimeDefault'
     chart: minio
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: minio
+    labels:
+      pod-security.kubernetes.io/enforce: privileged
   syncPolicy:
     automated:
       selfHeal: true