feat(vault): switch to nfs snapshots

tyriis · Jan 28, 2025 · 52353cc · 52353cc
1 parent ffdb7df
commit 52353cc
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 8 deletions.
diff --git a/kubernetes/talos-flux/apps/kube-system/csi-driver-nfs/app/helm-release.yaml b/kubernetes/talos-flux/apps/kube-system/csi-driver-nfs/app/helm-release.yaml
@@ -26,5 +26,10 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    # https://artifacthub.io/packages/helm/csi-driver-nfs/csi-driver-nfs?modal=values
     externalSnapshotter:
       enabled: false
+    volumeSnapshotClass:
+      create: true
+      name: nfs-csi-snapshot
+      deletionPolicy: Delete
diff --git a/kubernetes/talos-flux/apps/secops/vault/app/helm-release.yaml b/kubernetes/talos-flux/apps/secops/vault/app/helm-release.yaml
@@ -75,7 +75,7 @@ spec:
         enabled: true
         size: 1Gi
         mountPath: /vault/data
-        storageClass: ceph-block
+        storageClass: nfs-csi
       auditStorage:
         enabled: true
         size: 1Gi

diff --git a/kubernetes/talos-flux/apps/secops/vault/app/persistent-volume-claim.yaml b/kubernetes/talos-flux/apps/secops/vault/app/persistent-volume-claim.yaml
@@ -13,4 +13,4 @@ spec:
   resources:
     requests:
       storage: 1Gi
-  storageClassName: ceph-block
+  storageClassName: nfs-csi
diff --git a/kubernetes/talos-flux/apps/secops/vault/app/replication-destination.yaml b/kubernetes/talos-flux/apps/secops/vault/app/replication-destination.yaml
@@ -13,12 +13,12 @@ spec:
   restic:
     repository: vault-volsync
     copyMethod: Snapshot
-    volumeSnapshotClassName: csi-ceph-blockpool
-    cacheStorageClassName: ceph-block
+    volumeSnapshotClassName: nfs-csi-snapshot
+    cacheStorageClassName: nfs-csi
     cacheAccessModes:
       - ReadWriteOnce
     cacheCapacity: 1Gi
-    storageClassName: ceph-block
+    storageClassName: nfs-csi
     accessModes:
       - ReadWriteOnce
     capacity: 1Gi

diff --git a/kubernetes/talos-flux/apps/secops/vault/app/replication-source.yaml b/kubernetes/talos-flux/apps/secops/vault/app/replication-source.yaml
@@ -12,12 +12,12 @@ spec:
     copyMethod: Snapshot
     pruneIntervalDays: 14
     repository: vault-volsync
-    volumeSnapshotClassName: csi-ceph-blockpool
+    volumeSnapshotClassName: nfs-csi-snapshot
     cacheCapacity: 1Gi
-    cacheStorageClassName: ceph-block
+    cacheStorageClassName: nfs-csi
     cacheAccessModes:
       - ReadWriteOnce
-    storageClassName: ceph-block
+    storageClassName: nfs-csi
     accessModes:
       - ReadWriteOnce
     moverSecurityContext: