From 9996e31c28e274dd1752d3ea562aa62de3b871f0 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Mon, 25 May 2026 22:02:22 +0300
Subject: Add NFS sentinel initContainers to radicale chart for 36

---
 f3s/radicale/helm-chart/templates/deployment.yaml | 32 +++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/f3s/radicale/helm-chart/templates/deployment.yaml b/f3s/radicale/helm-chart/templates/deployment.yaml
index 92b0e00..c58cdbd 100644
--- a/f3s/radicale/helm-chart/templates/deployment.yaml
+++ b/f3s/radicale/helm-chart/templates/deployment.yaml
@@ -18,6 +18,38 @@ spec:
         app: radicale
     spec:
       initContainers:
+      - name: nfs-check-collections
+        image: busybox:stable
+        command:
+        - sh
+        - -c
+        - |
+          test -f /mnt/.nfs-sentinel || (
+            echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel"
+            echo "refusing to start; node likely has NFS unmounted"
+            echo "pod would otherwise bind-mount the local-XFS shadow"
+            exit 1
+          )
+        volumeMounts:
+        - name: radicale-collections
+          mountPath: /mnt
+          readOnly: true
+      - name: nfs-check-auth
+        image: busybox:stable
+        command:
+        - sh
+        - -c
+        - |
+          test -f /mnt/.nfs-sentinel || (
+            echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel"
+            echo "refusing to start; node likely has NFS unmounted"
+            echo "pod would otherwise bind-mount the local-XFS shadow"
+            exit 1
+          )
+        volumeMounts:
+        - name: radicale-auth
+          mountPath: /mnt
+          readOnly: true
       - name: debug-auth-and-mounts
         image: busybox:1.36
         command: ["/bin/sh", "-c"]
-- 
cgit v1.2.3