From b34b075d10a87a6c19d62ec246e3b4b83fec642f Mon Sep 17 00:00:00 2001
From: Ian Keane <ian@keane.sh>
Date: Sun, 16 Aug 2026 15:26:03 -0400
Subject: [PATCH] Nginx hostnetwork with privileged namespace

---
 charts/ingress-nginx/namespace.yaml | 8 ++++++++
 charts/ingress-nginx/values.yaml    | 5 +++++
 2 files changed, 13 insertions(+)
 create mode 100644 charts/ingress-nginx/namespace.yaml

diff --git a/charts/ingress-nginx/namespace.yaml b/charts/ingress-nginx/namespace.yaml
new file mode 100644
index 0000000..2e88b39
--- /dev/null
+++ b/charts/ingress-nginx/namespace.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ingress-nginx
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged
diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml
index c79d573..7784746 100644
--- a/charts/ingress-nginx/values.yaml
+++ b/charts/ingress-nginx/values.yaml
@@ -1,2 +1,7 @@
 controller:
   hostNetwork: true
+  hostPort:
+    enabled: true
+  kind: DaemonSet
+  service:
+    type: ClusterIP