move psa labels from deployment to namespace

Signed-off-by: Joe Lanford <[email protected]>

Author: joelanford

config/manager/manager.yaml

@@ -9,6 +9,8 @@ metadata:
     app.kubernetes.io/created-by: operator-controller
     app.kubernetes.io/part-of: operator-controller
     app.kubernetes.io/managed-by: kustomize
+    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/enforce-version: latest
   name: system
 ---
 apiVersion: apps/v1
@@ -26,8 +28,6 @@ metadata:
     app.kubernetes.io/created-by: operator-controller
     app.kubernetes.io/part-of: operator-controller
     app.kubernetes.io/managed-by: kustomize
-    pod-security.kubernetes.io/enforce: restricted
-    pod-security.kubernetes.io/enforce-version: latest
 spec:
   selector:
     matchLabels: