stages/base/helmfile.yaml

@@ -3,8 +3,8 @@ repositories:
     url: https://metallb.github.io/metallb
   - name: ingress-nginx
     url: https://kubernetes.github.io/ingress-nginx
-  - name: proxmox-csi-plugin
-    url: oci://ghcr.io/sergelogvinov/charts/proxmox-csi-plugin
+  - name: csi-driver-nfs
+    url: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
   - name: jetstack
     url: https://charts.jetstack.io
   - name: mojo2600
@@ -23,12 +23,10 @@ releases:
     version: 4.12.0
     values:
       - ./values/ingress-nginx.values.yaml
-  - name: proxmox-csi-plugin
-    namespace: proxmox-csi
-    chart: proxmox-csi-plugin/proxmox-csi-plugin
-    version: 0.3.5
-    values:
-      - ./values/proxmox-csi-plugin.values.yaml.gotmpl
+  - name: csi-driver-nfs
+    namespace: kube-system
+    chart: csi-driver-nfs/csi-driver-nfs
+    version: v4.9.0
   - name: cert-manager
     namespace: cert-manager
     chart: jetstack/cert-manager

stages/base/kustomize/csi-driver-nfs.yaml

@@ -0,0 +1,13 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: nfs-csi
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.180
+  share: /mnt/nas
+reclaimPolicy: Delete
+volumeBindingMode: Immediate
+allowVolumeExpansion: true

stages/base/values/proxmox-csi-plugin.values.yaml.gotmpl

@@ -1,35 +0,0 @@
-config:
-  clusters:
-    - url: https://192.168.1.151:8006/api2/json
-      insecure: true
-      token_id: "kubernetes-csi@pve!csi"
-      token_secret: "key"
-      region: cluster-1
-
-# Deploy Node CSI driver only on proxmox nodes
-node:
-  nodeSelector:
-    # It will work only with Talos CCM, remove it overwise
-    node.cloudprovider.kubernetes.io/platform: nocloud
-  tolerations:
-    - operator: Exists
-
-# Deploy CSI controller only on control-plane nodes
-nodeSelector:
-  node-role.kubernetes.io/control-plane: ""
-tolerations:
-  - key: node-role.kubernetes.io/control-plane
-    effect: NoSchedule
-
-# Define storage classes
-# See https://pve.proxmox.com/wiki/Storage
-storageClass:
-  - name: proxmox-data-xfs
-    storage: data
-    reclaimPolicy: Delete
-    fstype: xfs
-  - name: proxmox-data
-    storage: data
-    reclaimPolicy: Delete
-    fstype: ext4
-    cache: writethrough

stages/identity/helmfile.yaml

@@ -9,3 +9,4 @@ releases:
     version: 2024.12.3
     values:
       - ./values/authentik.values.yaml.gotmpl
+    installed: false

stages/identity/values/authentik.values.yaml.gotmpl

@@ -2,8 +2,6 @@ postgresql:
   enabled: true
   auth:
     password: {{ readFile "../.envs/.authentik-postgresql" }}
-  volumePermissions:
-    enabled: true
 
 authentik:
   secret_key: {{ readFile "../.envs/.authentik-secret-key" }}