From 7d9f4547bb1c587966812d0857c66b4a4f511ef9 Mon Sep 17 00:00:00 2001
From: Marco van Zijl <marco@mvzijl.nl>
Date: Sun, 9 Nov 2025 20:57:28 +0100
Subject: [PATCH] Add pod security labels to managedNamespaceMetadata in Loki
 application configuration

---
 apps/logging/loki/application.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apps/logging/loki/application.yaml b/apps/logging/loki/application.yaml
index 2d5f096..136b5d6 100644
--- a/apps/logging/loki/application.yaml
+++ b/apps/logging/loki/application.yaml
@@ -28,3 +28,8 @@ spec:
       - CreateNamespace=true
       - ServerSideApply=true
       - SkipDryRunOnMissingResource=true
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: privileged
+        pod-security.kubernetes.io/audit: privileged
+        pod-security.kubernetes.io/warn: privileged