From f7853c4ddffa58cf05dbac4d6611a8a3955f8323 Mon Sep 17 00:00:00 2001
From: Paulo Gomes <paulo.gomes@weave.works>
Date: Thu, 20 Jan 2022 13:30:33 +0000
Subject: [PATCH] Enable pod security warnings for flux-system

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
---
 manifests/install/namespace.yaml     | 3 +++
 pkg/manifestgen/install/templates.go | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/manifests/install/namespace.yaml b/manifests/install/namespace.yaml
index c00a4321..c2b5961d 100644
--- a/manifests/install/namespace.yaml
+++ b/manifests/install/namespace.yaml
@@ -2,3 +2,6 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: flux-system
+  labels:
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: latest
diff --git a/pkg/manifestgen/install/templates.go b/pkg/manifestgen/install/templates.go
index 8cdce319..ac47cf27 100644
--- a/pkg/manifestgen/install/templates.go
+++ b/pkg/manifestgen/install/templates.go
@@ -165,6 +165,9 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: {{.Namespace}}
+  labels:
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: latest
 `
 
 func execTemplate(obj interface{}, tmpl, filename string) error {