[10:51:19] <btullis>	 elukey: I think I've restricted those pod update/delete rights to a list of `tenantNamespaces`now, as suggested. It will be applied to `wdqs` and `wdqs-next` to begin with. 
[10:52:13] <btullis>	 See: https://gerrit.wikimedia.org/r/c/operations/deployment-charts/+/1306223/8/helmfile.d/admin_ng/topolvm/values.yaml#13 and changes to https://gerrit.wikimedia.org/r/c/operations/deployment-charts/+/1305975/7
[12:33:21] <elukey>	 btullis: lovely thanks! 
[12:33:59] <elukey>	 btullis: the remaining thing to discuss is what level of activity do we see in the upstream chart, IIUC the last commits are not super ancient (less than a year)
[12:34:08] <elukey>	 so overall I think we can proceed
[12:34:11] <elukey>	 wdyt?
[12:54:55] <btullis>	 Great. So I think that the upstream chart has some automated workflows to track the latest three kubernetes releases. I settled on 0.38.1 as it was the last version that //officially// supported kubernets version 1.31 - I had a skim through https://github.com/topolvm/topolvm/compare/v0.38.1...main (as per https://phabricator.wikimedia.org/T428895#12022864) and couldn't see anything that made it worth running the latest version.
[12:55:52] <elukey>	 okok!
[12:56:05] <elukey>	 Maybe add all those info to wikitech as tracking record
[12:56:25] <btullis>	 I have a little bit of work to do on T429325 before I can actually switch it on, because currently it won't be able to hostPath mount the lvmd socket into the pods, but as long as I have a green light on the chart, the's a weight off my mind.
[12:56:25] <stashbot>	 T429325: Configure and run lvmd as a systemd service on selected dse-k8s worker nodes - https://phabricator.wikimedia.org/T429325
[12:56:47] <btullis>	 Yes, good thinking.