From 8d4f52cff481863002a936b3a118b706061647f8 Mon Sep 17 00:00:00 2001
From: Khue Doan <mail@khuedoan.com>
Date: Sun, 24 Nov 2024 20:11:10 +0700
Subject: [PATCH] fix(volsync): enable privileged movers by default

This might not be the best approach, but for now, it's the option with
the least hassle. I may refactor it in the future for greater
granularity.
---
 system/argocd/values.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/system/argocd/values.yaml b/system/argocd/values.yaml
index 1797ae3d..bd07fd1e 100644
--- a/system/argocd/values.yaml
+++ b/system/argocd/values.yaml
@@ -67,3 +67,9 @@ argocd-apps:
               - CreateNamespace=true
               - ApplyOutOfSyncOnly=true
               - ServerSideApply=true
+            managedNamespaceMetadata:
+              annotations:
+                # Enable privileged VolSync movers by default for all namespaces
+                # TODO this may be refactored in the future for finer granularity
+                # See also https://volsync.readthedocs.io/en/stable/usage/permissionmodel.html
+                volsync.backube/privileged-movers: "true"