feat(storage,security): openebs localpv (default StorageClass) + vault

2026-09-16 21:17:09 +00:00
parent 6b1fc54c0d
commit 8c14178bd9
13 changed files with 241 additions and 0 deletions
@@ -0,0 +1,11 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: storage
+
+components:
+  - ../../components/sops
+
+resources:
+  - ./namespace.yaml
+  - ./localpv-provisioner/ks.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: localpv-provisioner
+spec:
+  chart:
+    spec:
+      chart: localpv-provisioner
+      version: 4.6.0
+      sourceRef:
+        kind: HelmRepository
+        name: openebs
+  interval: 1h
+  maxHistory: 3
+  install:
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  upgrade:
+    crds: CreateReplace
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+  values:
+    analytics:
+      enabled: false
+    # openebs-hostpath объявляется StorageClass по умолчанию: PVC без явного
+    # storageClassName биндятся в /var/openebs/local на ноде, где оказался под.
+    hostpathClass:
+      isDefaultClass: true
+    localpv:
+      basePath: /var/openebs/local
@@ -0,0 +1,8 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: openebs
+spec:
+  interval: 12h
+  url: https://openebs.github.io/dynamic-localpv-provisioner
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./helmrepository.yaml
+  - ./helmrelease.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: localpv-provisioner
+spec:
+  interval: 1h
+  path: ./kubernetes/apps/storage/localpv-provisioner/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  targetNamespace: storage
+  wait: true
+  healthChecks:
+    - apiVersion: helm.toolkit.fluxcd.io/v2
+      kind: HelmRelease
+      name: localpv-provisioner
+      namespace: storage
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: storage
+  annotations:
+    kustomize.toolkit.fluxcd.io/prune: disabled