Add pod security labels to managed namespace for Rook-Ceph

apps/ceph/operator/application.yaml

@@ -27,3 +27,8 @@ spec:
     syncOptions:
       - CreateNamespace=true
       - ServerSideApply=true
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: privileged
+        pod-security.kubernetes.io/audit: privileged
+        pod-security.kubernetes.io/warn: privileged

apps/ceph/operator/values.yaml

@@ -22,14 +22,3 @@ rook-ceph:
     limits:
       cpu: 500m
       memory: 512Mi
-
-  # Ensure namespace has proper labels for Talos
-  extraObjects:
-    - apiVersion: v1
-      kind: Namespace
-      metadata:
-        name: rook-ceph
-        labels:
-          pod-security.kubernetes.io/enforce: privileged
-          pod-security.kubernetes.io/audit: privileged
-          pod-security.kubernetes.io/warn: privileged