diff options
| author | Paul Buetow <paul@buetow.org> | 2026-05-25 21:41:41 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-05-25 21:41:41 +0300 |
| commit | 76349a97b10275bd781f51b8f5fb4626a1653bec (patch) | |
| tree | f9598827cbb68cb7f00eaff6518a539f732f7456 | |
| parent | 971118f64bce6aa42e95e589982cc396c1242460 (diff) | |
Add keybr NFS sentinel initContainer for w5
| -rw-r--r-- | f3s/keybr/helm-chart/templates/deployment.yaml | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/f3s/keybr/helm-chart/templates/deployment.yaml b/f3s/keybr/helm-chart/templates/deployment.yaml index 513ce7f..e114a57 100644 --- a/f3s/keybr/helm-chart/templates/deployment.yaml +++ b/f3s/keybr/helm-chart/templates/deployment.yaml @@ -17,6 +17,23 @@ spec: labels: app: keybr spec: + initContainers: + - name: nfs-check-keybr-data + image: busybox:stable + command: + - sh + - -c + - | + test -f /mnt/.nfs-sentinel || ( + echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel" + echo "refusing to start; node likely has NFS unmounted" + echo "pod would otherwise bind-mount the local-XFS shadow" + exit 1 + ) + volumeMounts: + - name: keybr-data + mountPath: /mnt + readOnly: true securityContext: runAsUser: 1000 runAsGroup: 1000 |