Synology NFS export at /volume1/kubernetes currently grants mount permission only to 10.0.56.13 (rke2-agent2). rke2-agent1 gets "access denied by server". guacd + guacamole web both need the recordings volume, so co-locating is also efficient. Remove the nodeSelector once the Synology NFS ACL opens to all cluster nodes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>