apiVersion: v1
kind: Namespace
metadata:
  name: qbittorrent
  # NET_ADMIN is not allowed by Kubernetes' baseline Pod Security profile.
  # Scope the exception to this VPN application instead of weakening the
  # cluster.
  labels:
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/audit: privileged
    pod-security.kubernetes.io/warn: privileged