add nfs-subdir-external-provisioner

argocd-applications/base/nfs-subdir-external-provisioner-application.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: argo-app-nfs-subdir-external-provisioner
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: default
+    server: https://kubernetes.default.svc
+  source:
+    path: nfs-subdir-external-provisioner
+    repoURL: https://git.mziesel.nl/mans/argocd-test
+    targetRevision: HEAD
+  sources: []
+  project: default
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

nfs-subdir-external-provisioner/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ./namespace.yaml
+
+namespace: nfs-subdir-external-provisioner
+
+helmCharts:
+- name: nfs-subdir-external-provisioner
+  repo: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
+  releaseName: nfs-subdir-external-provisioner
+  version: 4.0.18
+  valuesFile: values.yaml
+  includeCRDs: true
+  namespace: nfs-subdir-external-provisioner

nfs-subdir-external-provisioner/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: nfs-subdir-external-provisioner
+  labels:
+    pod-security.kubernetes.io/enforce: privileged

nfs-subdir-external-provisioner/values.yaml

@@ -0,0 +1,9 @@
+nfs:
+  server: 192.168.10.30
+  path: /srv/nfs4
+  mountOptions:
+  - noatime
+  - nfsvers=4.2 # https://cloud.google.com/knowledge/kb/nfs-volume-timeouts-on-google-kubernetes-engine-000004912
+  - nolock # talos lacks a running statd daemon, required for network locks
+  volumeName: nfs-subdir-external-provisioner-root
+  reclaimPolicy: Retain