pub const STREAM_EXEC_ANNOTATION: &str = "kopiur.home-operations.com/stream-exec-movers";Expand description
Namespace annotation a cluster admin sets to allow stream backup sources in
that namespace.
Separate from PRIVILEGED_MOVERS_ANNOTATION because it gates a different
capability: not an elevated container, but pods/exec — the ability to run
commands inside OTHER pods in the namespace. Kubernetes separates that verb from
ordinary write access deliberately, and without this gate anyone who can create a
SnapshotPolicy in a namespace would effectively acquire it.