rook-ceph:
  crds:
    enabled: true

  monitoring:
    enabled: true

  priorityClassName: system-cluster-critical

  csi:
    enableMetadata: true
    serviceMonitor:
      enabled: true

  enableDiscoveryDaemon: true
  discoveryDaemonInterval: 6h

  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: 500m
      memory: 512Mi

# Ensure namespace has proper labels for Talos
extraObjects:
  - apiVersion: v1
    kind: Namespace
    metadata:
      name: rook-ceph
      labels:
        pod-security.kubernetes.io/enforce: privileged
        pod-security.kubernetes.io/audit: privileged
        pod-security.kubernetes.io/warn: privileged