From 644bfeb2a4952d5c3c32892bbfce9c46b653d4fd Mon Sep 17 00:00:00 2001
From: Ivan Mikheykin <ivan.mikheykin@flant.com>
Date: Wed, 4 Mar 2026 22:09:01 +0300
Subject: [PATCH] chore(module): temporarily disable restricted security
 policies

Signed-off-by: Ivan Mikheykin <ivan.mikheykin@flant.com>
---
 templates/namespace.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/templates/namespace.yaml b/templates/namespace.yaml
index 36404a1b01..dc19617aa3 100644
--- a/templates/namespace.yaml
+++ b/templates/namespace.yaml
@@ -4,6 +4,10 @@ d8-{{ .Chart.Name }}
 
 {{- define "namespace.labels" }}
 prometheus.deckhouse.io/rules-watcher-enabled: "true"
+{{- end }}
+
+{{/* add these labels back to namespace.labels when fix templates for privileged Pods */}}
+{{- define "namespace.labels.disabled.temporarily" }}
 security.deckhouse.io/pod-policy: "restricted"
 security.deckhouse.io/enable-security-policy-check: "true"
 {{- end }}