12 lines
477 B
YAML
12 lines
477 B
YAML
# Apply before Helm if you do not use --create-namespace, or use this to fix PSA after the fact:
|
|
# kubectl apply -f clusters/noble/apps/metallb/namespace.yaml
|
|
# MetalLB speaker needs hostNetwork + NET_ADMIN; incompatible with Pod Security "restricted".
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: metallb-system
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: privileged
|
|
pod-security.kubernetes.io/audit: privileged
|
|
pod-security.kubernetes.io/warn: privileged
|