diff --git a/kube/deploy/core/storage/minio-nas/app/hr.yaml b/kube/deploy/core/storage/minio-nas/app/hr.yaml
index 34be2814..4294705e 100644
--- a/kube/deploy/core/storage/minio-nas/app/hr.yaml
+++ b/kube/deploy/core/storage/minio-nas/app/hr.yaml
@@ -109,8 +109,7 @@ spec:
           iscsi:
             targetPortal: "${IP_TRUENAS}:3260"
             iqn: "${CONFIG_TRUENAS_IQN}:minio"
-            lun: "0"
-            initiatorName: "{{ .Release.Name }}"
+            lun: 0
             fsType: "xfs" # MinIO recommendation
         globalMounts:
           - subPath: "data"
diff --git a/kube/deploy/core/storage/minio-nas/ns.yaml b/kube/deploy/core/storage/minio-nas/ns.yaml
index 77835990..dca0c67e 100644
--- a/kube/deploy/core/storage/minio-nas/ns.yaml
+++ b/kube/deploy/core/storage/minio-nas/ns.yaml
@@ -5,6 +5,6 @@ metadata:
   name: minio-nas
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
-    pod-security.kubernetes.io/enforce: &ps restricted
+    pod-security.kubernetes.io/enforce: &ps baseline
     pod-security.kubernetes.io/audit: *ps
     pod-security.kubernetes.io/warn: *ps