argocd/base/argo-cd-cmd-params-cm.yaml

@@ -8,4 +8,3 @@ metadata:
   name: argocd-cmd-params-cm
 data:
   server.insecure: "true"
-  kustomize.buildOptions: "--enable-helm"

nfs-subdir-external-provisioner/kustomization.yaml

@@ -1,6 +1,16 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-namespace: nfs-provisioner
 resources:
-- github.com/kubernetes-sigs/nfs-subdir-external-provisioner//deploy?ref=nfs-subdir-external-provisioner-4.0.17
+  - ./namespace.yaml
+
+namespace: nfs-subdir-external-provisioner
+
+helmCharts:
+- name: nfs-subdir-external-provisioner
+  repo: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
+  releaseName: nfs-subdir-external-provisioner
+  version: 4.0.18
+  valuesFile: values.yaml
+  includeCRDs: true
+  namespace: nfs-subdir-external-provisioner

nfs-subdir-external-provisioner/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: nfs-subdir-external-provisioner
+  labels:
+    pod-security.kubernetes.io/enforce: privileged

nfs-subdir-external-provisioner/values.yaml

@@ -0,0 +1,9 @@
+nfs:
+  server: 192.168.10.30
+  path: /srv/nfs4
+  mountOptions:
+  - noatime
+  - nfsvers=4.2 # https://cloud.google.com/knowledge/kb/nfs-volume-timeouts-on-google-kubernetes-engine-000004912
+  - nolock # talos lacks a running statd daemon, required for network locks
+  volumeName: nfs-subdir-external-provisioner-root
+  reclaimPolicy: Retain