diff --git a/platform/monitoring/kube-prometheus-stack.yaml b/platform/monitoring/kube-prometheus-stack.yaml
index b7b2db4..1d669ab 100644
--- a/platform/monitoring/kube-prometheus-stack.yaml
+++ b/platform/monitoring/kube-prometheus-stack.yaml
@@ -396,7 +396,19 @@ spec:
       # same lie as an alert rule on a metric nobody scrapes. No alert rule references
       # node_mountstats_* yet, deliberately, for exactly that reason; the per-export latency rule
       # is the follow-up once the series are confirmed, and runbooks/node-io.md records the gap.
+      #
+      # extraArgs REPLACES, IT DOES NOT APPEND — and the chart's DEFAULT for this key is not empty.
+      # prometheus-node-exporter's own values.yaml ships two filesystem excludes in `extraArgs`
+      # (confirmed against the chart, and against the live DaemonSet's argv on prod). Listing only
+      # `--collector.mountstats` here would silently DROP both, so the filesystem collector would
+      # start reporting every container overlay and every kubelet bind mount: a large cardinality
+      # jump and a behaviour change in NodeDiskFillingUp, which alerts per mountpoint. Both
+      # defaults are therefore restated verbatim below. If the chart's defaults change on an
+      # upgrade, this list must be re-reconciled against
+      #   helm show values prometheus-community/prometheus-node-exporter | grep -A3 '^extraArgs:'
       extraArgs:
+        - --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/containerd/.+|var/lib/docker/.+|var/lib/kubelet/.+)($|/)
+        - --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs|erofs)$
         - --collector.mountstats
       resources:
         requests: