From 0b6ec221621b25a7de3b5e5b4fa595d577d11dd9 Mon Sep 17 00:00:00 2001
From: Brayden Langley <brayden167@gmail.com>
Date: Wed, 2 Sep 2026 11:34:41 -0700
Subject: [PATCH] fix: preserve production namespace security labels

---
 infra/kubernetes/base/namespace.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/infra/kubernetes/base/namespace.yaml b/infra/kubernetes/base/namespace.yaml
index 9a308ad..c9651a5 100644
--- a/infra/kubernetes/base/namespace.yaml
+++ b/infra/kubernetes/base/namespace.yaml
@@ -5,3 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/name: papertrade
     app.kubernetes.io/part-of: papertrade
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/enforce-version: v1.34
+    pod-security.kubernetes.io/audit: restricted
+    pod-security.kubernetes.io/audit-version: v1.34
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: v1.34