WiP proxmox-csi

stages/base/helmfile.yaml

@@ -3,8 +3,8 @@ repositories:
     url: https://metallb.github.io/metallb
   - name: ingress-nginx
     url: https://kubernetes.github.io/ingress-nginx
-  - name: csi-driver-nfs
+  - name: proxmox-csi-plugin
-    url: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+    url: oci://ghcr.io/sergelogvinov/charts/proxmox-csi-plugin
   - name: jetstack
     url: https://charts.jetstack.io
   - name: mojo2600
@@ -23,10 +23,12 @@ releases:
     version: 4.12.0
     values:
       - ./values/ingress-nginx.values.yaml
-  - name: csi-driver-nfs
+  - name: proxmox-csi-plugin
-    namespace: kube-system
+    namespace: proxmox-csi
-    chart: csi-driver-nfs/csi-driver-nfs
+    chart: proxmox-csi-plugin/proxmox-csi-plugin
-    version: v4.9.0
+    version: 0.3.5
+    values:
+      - ./values/proxmox-csi-plugin.values.yaml.gotmpl
   - name: cert-manager
     namespace: cert-manager
     chart: jetstack/cert-manager

stages/base/kustomize/csi-driver-nfs.yaml

@@ -1,13 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: nfs-csi
-  annotations:
-    storageclass.kubernetes.io/is-default-class: "true"
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.180
-  share: /mnt/nas
-reclaimPolicy: Delete
-volumeBindingMode: Immediate
-allowVolumeExpansion: true

stages/base/values/proxmox-csi-plugin.values.yaml.gotmpl

@@ -0,0 +1,35 @@
+config:
+  clusters:
+    - url: https://192.168.1.151:8006/api2/json
+      insecure: true
+      token_id: "kubernetes-csi@pve!csi"
+      token_secret: "key"
+      region: cluster-1
+
+# Deploy Node CSI driver only on proxmox nodes
+node:
+  nodeSelector:
+    # It will work only with Talos CCM, remove it overwise
+    node.cloudprovider.kubernetes.io/platform: nocloud
+  tolerations:
+    - operator: Exists
+
+# Deploy CSI controller only on control-plane nodes
+nodeSelector:
+  node-role.kubernetes.io/control-plane: ""
+tolerations:
+  - key: node-role.kubernetes.io/control-plane
+    effect: NoSchedule
+
+# Define storage classes
+# See https://pve.proxmox.com/wiki/Storage
+storageClass:
+  - name: proxmox-data-xfs
+    storage: data
+    reclaimPolicy: Delete
+    fstype: xfs
+  - name: proxmox-data
+    storage: data
+    reclaimPolicy: Delete
+    fstype: ext4
+    cache: writethrough

stages/identity/helmfile.yaml

@@ -9,4 +9,3 @@ releases:
     version: 2024.12.3
     values:
       - ./values/authentik.values.yaml.gotmpl
-    installed: false

stages/identity/values/authentik.values.yaml.gotmpl

@@ -2,6 +2,8 @@ postgresql:
   enabled: true
   auth:
     password: {{ readFile "../.envs/.authentik-postgresql" }}
+  volumePermissions:
+    enabled: true
 
 authentik:
   secret_key: {{ readFile "../.envs/.authentik-secret-key" }}