From 86bc420ecae39a10258a79a4aa68d9cf2a87347c Mon Sep 17 00:00:00 2001
From: 5cat <cat@heaven.ist>
Date: Sun, 26 Feb 2023 13:34:58 +0800
Subject: [PATCH] adding privilged namespace note for talos

---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index d8604a5..2e98c62 100644
--- a/README.md
+++ b/README.md
@@ -185,6 +185,13 @@ node:
 
 and continue your democratic installation as usuall with other iscsi drivers.
 
+#### Privilged Namespace
+democratic-csi requires privileged access to the nodes, so the namespace should allow for privileged pods. One way of doing it is via [namespace labels](https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/).
+Add the followin label to the democratic-csi installation namespace `pod-security.kubernetes.io/enforce=privileged`
+```
+kubectl label --overwrite namespace democratic-csi pod-security.kubernetes.io/enforce=privileged
+```
+
 ### nvmeof
 
 ```bash