Add pod-security labels to namespace

README.md

@@ -62,7 +62,7 @@ The Synology CSI driver supports:
         - Create a **default** storage class named "`synology-iscsi-storage`" that uses the "`Retain`" policy.
         - Create a volume snapshot class named "`synology-snapshotclass`" that uses the "`Delete`" policy. (*Full* deployment only)
     * **HELM** (Local Development)
-        1. `kubectl create ns synology-csi`
+        1. `kubectl create ns synology-csi; kubectl label ns synology-csi pod-security.kubernetes.io/enforce=privileged --overwrite`
         2. `kubectl create secret -n synology-csi generic client-info-secret --from-file=./config/client-info.yml`
         3. `cd deploy/helm; make up`
 

deploy/kubernetes/v1.20/namespace.yml

@@ -2,3 +2,5 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: synology-csi
+  labels:
+    pod-security.kubernetes.io/enforce: privileged

scripts/deploy.sh

@@ -20,7 +20,7 @@ csi_install(){
     parse_version
     echo "Deploy Version: $deploy_k8s_version"
 
-    kubectl create ns synology-csi
+    kubectl apply -f "$SOURCE_PATH"/deploy/kubernetes/$deploy_k8s_version/namespace.yml
     kubectl create secret -n synology-csi generic client-info-secret --from-file="$config_file"
 
     if [ ! -d "$plugin_dir" ]; then