From 3da059216c2babef2f2c91c2f7674800c76dc4cc Mon Sep 17 00:00:00 2001
From: Teck Meng <furyx@hotmail.com>
Date: Tue, 6 Aug 2024 17:21:50 +0800
Subject: [PATCH] feat: longhorn PSA namespace

---
 ansible/rke2/readme.md         |  3 +++
 kubernetes/talos/longhorn.yaml | 11 +++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 kubernetes/talos/longhorn.yaml

diff --git a/ansible/rke2/readme.md b/ansible/rke2/readme.md
index c5e40a5..dda40b2 100644
--- a/ansible/rke2/readme.md
+++ b/ansible/rke2/readme.md
@@ -57,6 +57,8 @@ documentation:
 
 https://cert-manager.io/docs/usage/ingress/
 
+
+https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-8-5/
 ```bash
 kubectl get pods --namespace cert-manager
 kubectl create namespace cattle-system
@@ -95,6 +97,7 @@ kubectl get svc -n cattle-system
 # k delete -f https://raw.githubusercontent.com/longhorn/longhorn/v1.6.2/deploy/longhorn.yaml
 helm repo add longhorn https://charts.longhorn.io
 helm repo update
+k apply -f longhorn.yaml
 helm install longhorn longhorn/longhorn --namespace longhorn-system --create-namespace --version 1.6.2
 kubectl get pods \
 --namespace longhorn-system \
diff --git a/kubernetes/talos/longhorn.yaml b/kubernetes/talos/longhorn.yaml
new file mode 100644
index 0000000..15177ed
--- /dev/null
+++ b/kubernetes/talos/longhorn.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: longhorn-system
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: latest
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/audit-version: latest
+    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/warn-version: latest
\ No newline at end of file