From b7dde7c5eefbcb06369b0a59df2d5c17bac83c8f Mon Sep 17 00:00:00 2001
From: alkatrazz <alkatrazz@localhost.localdomain>
Date: Wed, 13 May 2026 21:46:54 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20monitoring=20namespace=20=E2=80=94=20Pod?=
 =?UTF-8?q?Security=20privileged=20pour=20node-exporter?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

node-exporter requiert hostNetwork, hostPID et hostPath — bloqué par
la policy baseline:latest de Talos. Label privileged appliqué.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 k8s/infra/monitoring/namespace.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/k8s/infra/monitoring/namespace.yaml b/k8s/infra/monitoring/namespace.yaml
index d325236..a5aece4 100644
--- a/k8s/infra/monitoring/namespace.yaml
+++ b/k8s/infra/monitoring/namespace.yaml
@@ -2,3 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: monitoring
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged