From c2a3e9ceb9fa7c22d8bfce45d07ba857f1ea3b52 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Thu, 15 Feb 2024 17:51:39 -0600
Subject: [PATCH] privileged movers

---
 kubernetes/apps/cert-manager/namespace.yaml         | 1 +
 kubernetes/apps/database/namespace.yaml             | 1 +
 kubernetes/apps/default/namespace.yaml              | 1 +
 kubernetes/apps/flux-system/namespace.yaml          | 1 +
 kubernetes/apps/kube-system/namespace.yaml          | 1 +
 kubernetes/apps/kyverno/namespace.yaml              | 1 +
 kubernetes/apps/network/namespace.yaml              | 1 +
 kubernetes/apps/nvidia-device-plugin/namespace.yaml | 1 +
 kubernetes/apps/rook-ceph/namespace.yaml            | 1 +
 kubernetes/apps/security/namespace.yaml             | 1 +
 kubernetes/apps/volsync-system/namespace.yaml       | 1 +
 11 files changed, 11 insertions(+)

diff --git a/kubernetes/apps/cert-manager/namespace.yaml b/kubernetes/apps/cert-manager/namespace.yaml
index ed788350..0093891c 100644
--- a/kubernetes/apps/cert-manager/namespace.yaml
+++ b/kubernetes/apps/cert-manager/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: cert-manager
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/database/namespace.yaml b/kubernetes/apps/database/namespace.yaml
index 5cad2860..93da4e01 100644
--- a/kubernetes/apps/database/namespace.yaml
+++ b/kubernetes/apps/database/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: database
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/default/namespace.yaml b/kubernetes/apps/default/namespace.yaml
index e0682e61..bd316383 100644
--- a/kubernetes/apps/default/namespace.yaml
+++ b/kubernetes/apps/default/namespace.yaml
@@ -5,4 +5,5 @@ metadata:
   name: default
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
     pgo-enabled-hsn.dev: "true"
diff --git a/kubernetes/apps/flux-system/namespace.yaml b/kubernetes/apps/flux-system/namespace.yaml
index b48db452..138433a2 100644
--- a/kubernetes/apps/flux-system/namespace.yaml
+++ b/kubernetes/apps/flux-system/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: flux-system
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/kube-system/namespace.yaml b/kubernetes/apps/kube-system/namespace.yaml
index 5eeb2c91..d897c9ce 100644
--- a/kubernetes/apps/kube-system/namespace.yaml
+++ b/kubernetes/apps/kube-system/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: kube-system
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/kyverno/namespace.yaml b/kubernetes/apps/kyverno/namespace.yaml
index 263304d1..2cf26ab4 100644
--- a/kubernetes/apps/kyverno/namespace.yaml
+++ b/kubernetes/apps/kyverno/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: kyverno
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/network/namespace.yaml b/kubernetes/apps/network/namespace.yaml
index 4d78d7b1..ea1e9e60 100644
--- a/kubernetes/apps/network/namespace.yaml
+++ b/kubernetes/apps/network/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: network
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/nvidia-device-plugin/namespace.yaml b/kubernetes/apps/nvidia-device-plugin/namespace.yaml
index f7ddb2a7..73f112b4 100644
--- a/kubernetes/apps/nvidia-device-plugin/namespace.yaml
+++ b/kubernetes/apps/nvidia-device-plugin/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: nvidia-device-plugin
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/rook-ceph/namespace.yaml b/kubernetes/apps/rook-ceph/namespace.yaml
index 4f4d74a8..3050ee16 100644
--- a/kubernetes/apps/rook-ceph/namespace.yaml
+++ b/kubernetes/apps/rook-ceph/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: rook-ceph
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
diff --git a/kubernetes/apps/security/namespace.yaml b/kubernetes/apps/security/namespace.yaml
index 791198c2..f27af201 100644
--- a/kubernetes/apps/security/namespace.yaml
+++ b/kubernetes/apps/security/namespace.yaml
@@ -5,4 +5,5 @@ metadata:
   name: security
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
     pgo-enabled-hsn.dev: "true"
diff --git a/kubernetes/apps/volsync-system/namespace.yaml b/kubernetes/apps/volsync-system/namespace.yaml
index 10f3c084..05df292f 100644
--- a/kubernetes/apps/volsync-system/namespace.yaml
+++ b/kubernetes/apps/volsync-system/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: volsync-system
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"