From 48aac4998b64788b4bce586ba4d87789c28b9cd9 Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Thu, 23 Jul 2026 07:54:20 -0700
Subject: [PATCH] fix(storage): add PodSecurity privileged labels for minio

Minio operator requires privileged securityContext. Without these labels,
StatefulSet stuck at 0/0 replicas (PodSecurity admission blocks pod creation).
---
 k8s/bootstrap-local/00-namespaces.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/k8s/bootstrap-local/00-namespaces.yaml b/k8s/bootstrap-local/00-namespaces.yaml
index 255d0ce..a0c8f0d 100644
--- a/k8s/bootstrap-local/00-namespaces.yaml
+++ b/k8s/bootstrap-local/00-namespaces.yaml
@@ -53,6 +53,10 @@ metadata:
   name: storage
   labels:
     name: storage
+    # REQUIRED: minio operator needs privileged securityContext
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged
 ---
 apiVersion: v1
 kind: Namespace