From d7852f7e8af41964278b56fdfc75a60b4647d933 Mon Sep 17 00:00:00 2001 From: admin Date: Sun, 15 Mar 2026 17:00:35 +0100 Subject: [PATCH] fix longhorn namespace pod security --- clusters/homelab/longhorn/namespaces.yaml | 4 ++++ talos/talconfig.yaml | 3 +++ 2 files changed, 7 insertions(+) diff --git a/clusters/homelab/longhorn/namespaces.yaml b/clusters/homelab/longhorn/namespaces.yaml index 4908399..700d670 100644 --- a/clusters/homelab/longhorn/namespaces.yaml +++ b/clusters/homelab/longhorn/namespaces.yaml @@ -3,3 +3,7 @@ apiVersion: v1 kind: Namespace metadata: name: longhorn-system + labels: + pod-security.kubernetes.io/enforce: privileged + pod-security.kubernetes.io/audit: privileged + pod-security.kubernetes.io/warn: privileged diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml index 36c997d..3c0e550 100644 --- a/talos/talconfig.yaml +++ b/talos/talconfig.yaml @@ -18,6 +18,7 @@ nodes: - siderolabs/intel-ucode # - siderolabs/tailscale - siderolabs/util-linux-tools + - siderolabs/iscsi-tools - hostname: op-02 ipAddress: 192.168.2.109 controlPlane: true @@ -30,6 +31,7 @@ nodes: - siderolabs/intel-ucode # - siderolabs/tailscale - siderolabs/util-linux-tools + - siderolabs/iscsi-tools - hostname: op-03 ipAddress: 192.168.2.110 controlPlane: true @@ -42,3 +44,4 @@ nodes: - siderolabs/intel-ucode # - siderolabs/tailscale - siderolabs/util-linux-tools + - siderolabs/iscsi-tools