app-root/application.yaml

@@ -17,7 +17,7 @@ spec:
   syncPolicy:
     automated:
       prune: false
-      selfHeal: true
+      selfHeal: false
     syncOptions:
       - CreateNamespace=true
       - ApplyOutOfSyncOnly=true

apps/ceph/operator/values.yaml

@@ -22,14 +22,3 @@ rook-ceph:
     limits:
       cpu: 500m
       memory: 512Mi
-
-# Ensure namespace has proper labels for Talos
-extraObjects:
-  - apiVersion: v1
-    kind: Namespace
-    metadata:
-      name: rook-ceph
-      labels:
-        pod-security.kubernetes.io/enforce: privileged
-        pod-security.kubernetes.io/audit: privileged
-        pod-security.kubernetes.io/warn: privileged