From 0880fce9cf59f5ce8571828c1f5c6395a978dab8 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Mon, 25 May 2026 21:30:24 +0300
Subject: Add NFS sentinel initContainer for git-server s5

---
 f3s/git-server/helm-chart/templates/deployment.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'f3s/git-server')

diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml
index 41dff7c..31ac14b 100644
--- a/f3s/git-server/helm-chart/templates/deployment.yaml
+++ b/f3s/git-server/helm-chart/templates/deployment.yaml
@@ -22,6 +22,23 @@ spec:
       securityContext:
         fsGroup: 33
       initContainers:
+      - name: nfs-check-repos
+        image: busybox:stable
+        command:
+        - sh
+        - -c
+        - |
+          test -f /mnt/.nfs-sentinel || (
+            echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel"
+            echo "refusing to start; node likely has NFS unmounted"
+            echo "pod would otherwise bind-mount the local-XFS shadow"
+            exit 1
+          )
+        volumeMounts:
+        - name: repos
+          mountPath: /mnt
+          readOnly: true
+
       - name: setup
         image: alpine:3.19
         command:
-- 
cgit v1.2.3