diff --git a/roles/rke2/templates/manifests/deploy-cephfs.j2 b/roles/rke2/templates/manifests/deploy-cephfs.j2
index 4a0f094454d54bb57d7af1412ae54342b42b42d2..4f9ef6a5fc6de0d5ad6ef3285972f322e0b61cb4 100644
--- a/roles/rke2/templates/manifests/deploy-cephfs.j2
+++ b/roles/rke2/templates/manifests/deploy-cephfs.j2
@@ -25,6 +25,9 @@ spec:
         enabled: true
     topology:
       enabled: false
+    nodeplugin:
+      podSecurityPolicy:
+        enabled: true