Hey, is it possible to set the following Values inside the Helm chart to get this error away?

W0521 18:17:15.302970   19551 warnings.go:70] would violate PodSecurity "restricted:latest": privileged (container "longhorn-manager" must not set securityContext.privileged=true), allowPrivilegeEscalation != false (containers "wait-longhorn-admission-webhook", "longhorn-manager" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "wait-longhorn-admission-webhook", "longhorn-manager" must set securityContext.capabilities.drop=["ALL"]), restricted volume types (volumes "dev", "proc", "longhorn" use restricted volume type "hostPath"), runAsNonRoot != true (pod or containers "wait-longhorn-admission-webhook", "longhorn-manager" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "wait-longhorn-admission-webhook", "longhorn-manager" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0521 18:17:15.341817   19551 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "longhorn-ui" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "longhorn-ui" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "longhorn-ui" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "longhorn-ui" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0521 18:17:15.341935   19551 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (containers "wait-longhorn-manager", "longhorn-driver-deployer" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "wait-longhorn-manager", "longhorn-driver-deployer" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "wait-longhorn-manager", "longhorn-driver-deployer" must set securityContext.runAsNonRoot=true), runAsUser=0 (pod must not set runAsUser=0), seccompProfile (pod or containers "wait-longhorn-manager", "longhorn-driver-deployer" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0521 18:17:15.342215   19551 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "longhorn-recovery-backend" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "longhorn-recovery-backend" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "longhorn-recovery-backend" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "longhorn-recovery-backend" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0521 18:17:15.342039   19551 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "longhorn-conversion-webhook" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "longhorn-conversion-webhook" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "longhorn-conversion-webhook" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "longhorn-conversion-webhook" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0521 18:17:15.351320   19551 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (containers "wait-longhorn-conversion-webhook", "longhorn-admission-webhook" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "wait-longhorn-conversion-webhook", "longhorn-admission-webhook" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "wait-longhorn-conversion-webhook", "longhorn-admission-webhook" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "wait-longhorn-conversion-webhook", "longhorn-admission-webhook" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

I can't find any values like securityContext.* inside teh Default Values.yaml which i get with the following command:

helm show values longhorn/longhorn > values.yaml

You can refer to this doc https://longhorn.io/docs/1.4.2/deploy/important-notes/#pod-security-policies-disabled--pod-security-admission-introduction hope this solve your issue

PSP is Deprecated in Kubernetes 1.25

Hello @strong-sunset-30. Could you clarify what version of Kubernetes you are using and how you have the longhorn-system namespace labeled? It sounds like you are already on Kubernetes v1.25+ with the Pod Security Admission Controller enabled. If so, it may be configured by default to warn against the restricted standard in any namespace that is not otherwise labeled (e.g. https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-admission-controller/#configure-the-admission-controller). If this is the case, consider labeling the longhorn-system namespace with the

<http://pod-security.kubernetes.io/warn|pod-security.kubernetes.io/warn>: privileged

label as discussed in @aloof-branch-69545's link. This may eliminate the warnings you are seeing. If it does, please let us know!

Thanks i try it out