Rebase Gitea smb volume #5

services/Gitea/application-gitea.yaml

@@ -9,6 +9,12 @@ spec:
     namespace: gitea
   project: default
   sources:
+#  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
+#    path: services/Gitea/manifests
+#    targetRevision: HEAD
+  - repoURL: https://github.com/djpbessems/Kubernetes.K3s.installLog
+    path: services/Gitea/manifests
+    targetRevision: master
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
     # targetRevision: 10.6.0
@@ -16,9 +22,9 @@ spec:
     helm:
       valueFiles:
       - $values/services/Gitea/values.yaml
-  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    targetRevision: master
-    ref: values
-#  - repoURL: https://github.com/djpbessems/Kubernetes.K3s.installLog
+#  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
 #    targetRevision: master
 #    ref: values
+  - repoURL: https://github.com/djpbessems/Kubernetes.K3s.installLog
+    targetRevision: master
+    ref: values

services/Gitea/manifests/persistentvolume-csismb-gitea-data.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-gitea-data
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-gitea-data
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=1000
+    - gid=1000
+    - nobrl
+    - cache=none
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#gitea#data
+    volumeAttributes:
+      source: //192.168.154.195/K3s.Volumes
+      subDir: gitea/data
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: gitea

services/Gitea/manifests/persistentvolumeclaim-csismb-gitea-data.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: csismb-gitea-data
+  namespace: gitea
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: csismb-gitea-data
+  resources:
+    requests:
+      storage: 5Gi

services/Gitea/manifests/sealedsecret-smb-credentials.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-credentials
+  namespace: gitea
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smb-credentials
+      namespace: gitea
+    type: Opaque

services/Gitea/values.yaml

@@ -35,7 +35,9 @@ ingress:
         - path: /
           pathType: Prefix
 persistence:
-  storageClass: smb-csi
+  create: false
+  claimName: csismb-gitea-data
+  storageClass: csismb-gitea-data
 postgresql:
   enabled: false
 postgresql-ha:

services/Minecraft/values.yaml

@@ -1,29 +0,0 @@
-minecraftServer:
-  # version: 1.21.73.01
-
-  eula: "true"
-  serverName: Clydebank Rd Survival
-
-  serviceType: LoadBalancer
-  loadBalancerIP: 192.168.154.241
-
-  cheats: true
-
-  ops: "2533274801327950"
-
-persistence:
-  storageClass: "smb-csi"
-  dataDir:
-    enabled: true
-    Size: 1Gi
-    accessModes:
-      - ReadWriteOnce
-
-resources:
-  requests:
-    memory: 1024Mi
-    cpu: 500m
-
-extraEnv:
-  ENABLE_ROLLING_LOGS: true
-  OVERRIDE_SERVER_PROPERTIES: true

services/PVR/Jellyfin/application-jellyfin.yaml

@@ -8,6 +8,10 @@ spec:
     server: https://kubernetes.default.svc
     namespace: jellyfin
   project: default
+  syncPolicy:
+    automated: {}
+    syncOptions:
+      - CreateNamespace=true
   sources:
   - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
     path: services/PVR/Jellyfin/manifests

services/PVR/Jellyfin/manifests/persistentvolume-csismb-jellyfin-config.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-jellyfin-config
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-jellyfin-config
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=911
+    - gid=911
+    - nobrl
+    - cache=none
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#jellyfin#config
+    volumeAttributes:
+      source: //192.168.154.195/K3s.Volumes
+      subDir: jellyfin/config
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: jellyfin

services/PVR/Jellyfin/manifests/persistentvolume-csismb-jellyfin-movies.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-jellyfin-movies
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-jellyfin-movies
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=911
+    - gid=911
+#    - nobrl
+    - cache=none
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#jellyfin#movies
+    volumeAttributes:
+      source: //192.168.154.195/Public
+      subDir: Video's/Films
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: jellyfin

services/PVR/Jellyfin/manifests/persistentvolume-csismb-jellyfin-series.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-jellyfin-series
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-jellyfin-series
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=911
+    - gid=911
+#    - nobrl
+    - cache=none
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#jellyfin#series
+    volumeAttributes:
+      source: //192.168.154.195/Public
+      subDir: Video's/Series
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: jellyfin

services/PVR/Jellyfin/manifests/persistentvolume-flexvolsmb-jellyfin-config.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-jellyfin-config
-  namespace: jellyfin
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-config
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.195
-      share: /K3s.Volumes/jellyfin/config

services/PVR/Jellyfin/manifests/persistentvolume-flexvolsmb-jellyfin-movies.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-jellyfin-movies
-  namespace: jellyfin
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-movies
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.195
-      share: /Public/Video's/Films

services/PVR/Jellyfin/manifests/persistentvolume-flexvolsmb-jellyfin-series.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-jellyfin-series
-  namespace: jellyfin
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-series
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=911,gid=911,iocharset=utf8,cache=none
-      server: 192.168.154.195
-      share: /Public/Video's/Series

services/PVR/Jellyfin/manifests/persistentvolumeclaim-csismb-jellyfin-config.yaml

@@ -1,12 +1,12 @@
-apiVersion: v1
 kind: PersistentVolumeClaim
+apiVersion: v1
 metadata:
-  name: flexvolsmb-jellyfin-series
+  name: csismb-jellyfin-config
   namespace: jellyfin
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-series
   resources:
     requests:
       storage: 1Gi
+  storageClassName: csismb-jellyfin-config

services/PVR/Jellyfin/manifests/persistentvolumeclaim-csismb-jellyfin-movies.yaml

@@ -1,12 +1,12 @@
-apiVersion: v1
 kind: PersistentVolumeClaim
+apiVersion: v1
 metadata:
-  name: flexvolsmb-jellyfin-config
+  name: csismb-jellyfin-movies
   namespace: jellyfin
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-config
   resources:
     requests:
       storage: 1Gi
+  storageClassName: csismb-jellyfin-movies

services/PVR/Jellyfin/manifests/persistentvolumeclaim-csismb-jellyfin-series.yaml

@@ -1,12 +1,12 @@
-apiVersion: v1
 kind: PersistentVolumeClaim
+apiVersion: v1
 metadata:
-  name: flexvolsmb-jellyfin-movies
+  name: csismb-jellyfin-series
   namespace: jellyfin
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: flexvolsmb-jellyfin-movies
   resources:
     requests:
       storage: 1Gi
+  storageClassName: csismb-jellyfin-series

services/PVR/Jellyfin/manifests/sealedsecret-flexvolsmb-credentials.yaml

@@ -1,16 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: flexvolsmb-credentials
-  namespace: jellyfin
-spec:
-  encryptedData:
-    password: AgCSzsJlQR2jIMsm7R9goGzziFCEb9quF+tvfXN3dKqWo/zviB4eU5CZ243bEX71eygU+1K7NpcPMF3yD1OB/QBsEKL1Lr62IcHeAHEnsySa2twfLR2wIINXm2kR946HRlmMkroUiJMAdDYCuYnXPxWRewmotvNL1ODK7Yu4rtaZbMjYrV/PDz8I6xIWmpTlsOOI7oj25ZngxS0W8OPMNn83yDR4zgsX2CenNygOfCXdYzJJcMv2Ubue/LxUt3z+RLQznu3/2h8bElauxlJC6QCHXTbjzOX3iFVbFFzn65a8NJIaPysFu+Fi68VdFzwTSq+/ITlun20/zFlW4x177hSdYgUh7pMZpcOMqOPyeT/8Jonxx3wa9CUr1JGnlRukwrfrL6Doyh04FJiftUiLVYDsqCgrLRqaTQ1+90NRFZGhaKhYkSrKfWjNbupiPCTsRsRmVbrPaVCDK5q820l8Jyjhz6dBu0Fi0qXEL7ZbXF1+bdPwnIOgtPPUOJVtc0gYuLluHS6ODd7H8bKc0me5Vr5U0ME0iqhvbyJ6tpkJFpE9tMo4wIpYG3cKiIi1SgHZ7rOKRVfS72xbRhxnKmi1O64J2+jN94wEGIHX8LFppvtxi2WrsyHffQuawkGO4S4sSYVZjoCRMcs0P+jvPMorF7Q0/uecH6noaJIj4it8YoirO6LVUOQKwDg1OEOByeCI7rDFX740UZiX9aOH6osy0Z8e
-    username: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: flexvolsmb-credentials
-      namespace: jellyfin
-    type: mount/smb

services/PVR/Jellyfin/manifests/sealedsecret-smb-credentials.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-credentials
+  namespace: jellyfin
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smb-credentials
+      namespace: jellyfin
+    type: Opaque

services/PVR/Jellyfin/values.yaml

@@ -18,20 +18,20 @@ securityContext:
   privileged: true
 
 volumes:
-  - name: flexvolsmb-jellyfin-movies
+  - name: csismb-jellyfin-movies
     persistentVolumeClaim:
-      claimName: flexvolsmb-jellyfin-movies
-  - name: flexvolsmb-jellyfin-series
+      claimName: csismb-jellyfin-movies
+  - name: csismb-jellyfin-series
     persistentVolumeClaim:
-      claimName: flexvolsmb-jellyfin-series
+      claimName: csismb-jellyfin-series
   - name: igpu
     hostPath:
       path: /dev/dri
 
 volumeMounts:
-  - name: flexvolsmb-jellyfin-movies
+  - name: csismb-jellyfin-movies
     mountPath: "/movies"
-  - name: flexvolsmb-jellyfin-series
+  - name: csismb-jellyfin-series
     mountPath: "/series"
   - name: igpu
     mountPath: /dev/dri
@@ -42,6 +42,6 @@ persistence:
   config:
     enabled: true
     size: 5Gi
-    existingClaim: flexvolsmb-jellyfin-config
+    existingClaim: csismb-jellyfin-config
   media:
     enabled: false

services/Vaultwarden/deployment-vaultwarden.yaml

@@ -44,8 +44,8 @@ spec:
             containerPort: 3012
         volumeMounts:
         - mountPath: /data
-          name: flexvolsmb-vaultwarden-data
+          name: csismb-vaultwarden-data
       volumes:
-      - name: flexvolsmb-vaultwarden-data
+      - name: csismb-vaultwarden-data
         persistentVolumeClaim:
-          claimName: flexvolsmb-vaultwarden-data
+          claimName: csismb-vaultwarden-data

services/Vaultwarden/persistentvolume-csismb-vaultwarden-data.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-vaultwarden-data
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-vaultwarden-data
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - nobrl
+    - cache=none
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#vaultwarden#data
+    volumeAttributes:
+      source: //192.168.154.195/K3s.Volumes
+      subDir: vaultwarden/data
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: vaultwarden

services/Vaultwarden/persistentvolume-flexvolsmb-vaultwarden-data.yaml

@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-vaultwarden-data
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-vaultwarden-data
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl
-      server: 192.168.154.195
-      share: /K3s.Volumes/vaultwarden/data

services/Vaultwarden/persistentvolumeclaim-csismb-vaultwarden-data.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: flexvolsmb-vaultwarden-data
+  name: csismb-vaultwarden-data
   namespace: vaultwarden
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: flexvolsmb-vaultwarden-data
+  storageClassName: csismb-vaultwarden-data
   resources:
     requests:
       storage: 1Gi

services/Vaultwarden/sealedsecret-flexvolsmb-credentials.yaml

@@ -1,16 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: flexvolsmb-credentials
-  namespace: vaultwarden
-spec:
-  encryptedData:
-    password: AgAFSxyvsZICWKYR0ZY7tNH17VP2XPrOIA//MldFVwm4f7npDiclcO/buJE8k/S4iWx5VA9mPXwboZOzUJOakL/6G5rhQ0VxpkaQXDHOqv5412NA0j9lc+ZvB3WD32AvujNUOXgPj4PenmUKe1SX4LT8p3QXbC/3Cpl9YmgsB7c7T3TNg9NGtztbPibwHPUn/wc9wcGbyZQVN7JUd0U9eayifucGxdzjVQtNx9khHerCHDdEJ9AzM4YDPAUwLrkML3KaKO4Kr7XhNRDYV1eGNWBTFbM1O/kISJmt2TBXDe+cQjcygznmybcs8lhX3nHSjJ27SzheBtnD26SwcZ5UqihExK6m1qvl62ePwtztUlHFJeCSTfwWZHigVFwi7TIw6xaXvdDX6Th4/KN403hh0EkxHvlvcHOLsI3eu8predUf3ZyqpZex6fB+c9CBrCRMQzoMXeSBntC+59NxfH7tDLthAS+nHMrBEJDvpckPFd/SZe2xA6nBZngaA0NZewWwBgMVhyjp9/zvHyLwfItb0IgVIN7sfK58BKDT40JdbdwwpvB1xdZ8IktAoUpMc+pSI+ZrVtQwrPYR6g09QzMV6qqTfz/V34zkScaK/E5vLr4hhUv2gjJeqWKc+xg7vrLg3z6K2Ssys21o+UyzOlm3tPl+LPTMFor1B8QrPLX/hFQX2kzG7wblWt1PHA7PoYLby/VEXRiOeDv3Aq30+TyF8RaH
-    username: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: flexvolsmb-credentials
-      namespace: vaultwarden
-    type: mount/smb

services/Vaultwarden/sealedsecret-smb-credentials.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-credentials
+  namespace: vaultwarden
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smb-credentials
+      namespace: vaultwarden
+    type: Opaque

storage/csi-driver-smb/application-csi-driver-smb.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: csi-driver-smb
+  namespace: argo-cd
+spec:
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: kube-system
+  project: default
+  syncPolicy:
+    automated: {}
+  sources:
+  # - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
+  #   path: storage/csi-driver-smb/manifests
+  #   targetRevision: HEAD
+  - repoURL: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+    chart: csi-driver-smb
+    targetRevision: v1.18.0
+    helm:
+      valueFiles:
+      - $values/storage/csi-driver-smb/values.yaml
+  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
+    targetRevision: master
+    ref: values

storage/csi-driver-smb/values.yaml

@@ -0,0 +1,2 @@
+windows:
+  enabled: false

storage/flexVolSMB/daemonSet-flexVolSMB.yml

@@ -1,32 +0,0 @@
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  name: juliohm-cifs-volumedriver-installer
-spec:
-  selector:
-    matchLabels:
-      app: juliohm-cifs-volumedriver-installer
-  template:
-    metadata:
-      name: juliohm-cifs-volumedriver-installer
-      labels:
-        app: juliohm-cifs-volumedriver-installer
-    spec:
-      containers:
-        - image: juliohm/kubernetes-cifs-volumedriver-installer:2.3
-          name: flex-deploy
-          imagePullPolicy: Always
-          env:
-            - name: VENDOR
-              value: mount
-            - name: DRIVER
-              value: smb
-          securityContext:
-            privileged: true
-          volumeMounts:
-            - mountPath: /flexmnt
-              name: flexvolume-mount
-      volumes:
-        - name: flexvolume-mount
-          hostPath:
-            path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/

storage/flexVolSMB/sealedSecret-flexVolSMB.yml

@@ -1,24 +0,0 @@
-{
-  "kind": "SealedSecret",
-  "apiVersion": "bitnami.com/v1alpha1",
-  "metadata": {
-    "name": "smb-secret",
-    "namespace": "default",
-    "creationTimestamp": null
-  },
-  "spec": {
-    "template": {
-      "metadata": {
-        "name": "smb-secret",
-        "namespace": "default",
-        "creationTimestamp": null
-      },
-      "type": "mount/smb",
-      "data": null
-    },
-    "encryptedData": {
-      "password": "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",
-      "username": "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"
-    }
-  }
-}

system/SealedSecrets/application-sealed-secrets-controller.yaml

@@ -1,20 +1,22 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: minecraft-bedrock
+  name: sealed-secrets-controller
   namespace: argo-cd
 spec:
   destination:
     server: https://kubernetes.default.svc
-    namespace: minecraft
+    namespace: kube-system
   project: default
+  syncPolicy:
+    automated: {}
   sources:
-  - repoURL: https://itzg.github.io/minecraft-server-charts/
-    chart: minecraft-bedrock
-    targetRevision: 2.8.4
+  - repoURL: https://bitnami-labs.github.io/sealed-secrets
+    chart: sealed-secrets
+    targetRevision: 2.17.3
     helm:
       valueFiles:
-      - $values/services/Minecraft/values.yaml
+      - $values/system/SealedSecrets/values.yaml
   - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
     targetRevision: master
     ref: values

system/SealedSecrets/values.yaml

@@ -0,0 +1,4 @@
+networkPolicy:
+  enabled: true
+  egress:
+    enabled: true