From 1f1a35681a257588c3250cc29e2dd87fa60c2f94 Mon Sep 17 00:00:00 2001
From: Marco van Zijl <marco@mvzijl.nl>
Date: Sun, 9 Nov 2025 19:42:57 +0100
Subject: [PATCH] Add pod security labels to managedNamespaceMetadata in
 Prometheus application

---
 apps/monitoring/prometheus/application.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apps/monitoring/prometheus/application.yaml b/apps/monitoring/prometheus/application.yaml
index 4feb767..0a9f2e7 100644
--- a/apps/monitoring/prometheus/application.yaml
+++ b/apps/monitoring/prometheus/application.yaml
@@ -28,3 +28,8 @@ spec:
       - CreateNamespace=true
       - ServerSideApply=true
       - SkipDryRunOnMissingResource=true
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: privileged
+        pod-security.kubernetes.io/audit: privileged
+        pod-security.kubernetes.io/warn: privileged