From 517d9d062e690543ce976f1943cc7c985a2330b9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Petazzoni?= <jerome.petazzoni@gmail.com>
Date: Fri, 29 May 2026 20:12:24 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7=20Tweak=20konk=20for=20bare=20meta?=
 =?UTF-8?q?l=20Talos=20setups?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 prepare-labs/konk.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/prepare-labs/konk.sh b/prepare-labs/konk.sh
index dfa2c34f..e2909759 100755
--- a/prepare-labs/konk.sh
+++ b/prepare-labs/konk.sh
@@ -18,8 +18,8 @@
 set -e
 
 KONKTAG=konk
-PROVIDER=scaleway
-STUDENTS=2
+PROVIDER=external
+STUDENTS=1
 
 case "$PROVIDER" in
 linode)
@@ -40,6 +40,8 @@ export KUBECONFIG=~/kubeconfig
 if [ "$PROVIDER" = "kind" ]; then
   kind create cluster --name $KONKTAG
   ADDRTYPE=InternalIP
+elif [ "$PROVIDER" = "external" ]; then
+  ADDRTYPE=InternalIP
 else
   if ! [ -f tags/$KONKTAG/stage2/kubeconfig.101 ]; then
     ./labctl create --mode mk8s --settings settings/konk.env --provider $PROVIDER --tag $KONKTAG
@@ -61,6 +63,8 @@ done
 helm upgrade --install --repo https://prometheus-community.github.io/helm-charts \
   --namespace prom-system --create-namespace \
   kube-prometheus-stack kube-prometheus-stack
+# if the cluster has strict pod security settings, this will allow node exporter to run
+kubectl label ns prom-system pod-security.kubernetes.io/enforce=privileged
 
 # and also fix sysctl
 kubectl apply -f ../k8s/sysctl.yaml --namespace kube-system