apiVersion: v1
kind: Namespace
metadata:
  name: openebs
  labels:
    # openebs needs to run as privileged
    pod-security.kubernetes.io/enforce: privileged