From 76349a97b10275bd781f51b8f5fb4626a1653bec Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Mon, 25 May 2026 21:41:41 +0300
Subject: Add keybr NFS sentinel initContainer for w5

---
 f3s/keybr/helm-chart/templates/deployment.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'f3s/keybr')

diff --git a/f3s/keybr/helm-chart/templates/deployment.yaml b/f3s/keybr/helm-chart/templates/deployment.yaml
index 513ce7f..e114a57 100644
--- a/f3s/keybr/helm-chart/templates/deployment.yaml
+++ b/f3s/keybr/helm-chart/templates/deployment.yaml
@@ -17,6 +17,23 @@ spec:
       labels:
         app: keybr
     spec:
+      initContainers:
+      - name: nfs-check-keybr-data
+        image: busybox:stable
+        command:
+        - sh
+        - -c
+        - |
+          test -f /mnt/.nfs-sentinel || (
+            echo "ERROR: NFS sentinel missing at /mnt/.nfs-sentinel"
+            echo "refusing to start; node likely has NFS unmounted"
+            echo "pod would otherwise bind-mount the local-XFS shadow"
+            exit 1
+          )
+        volumeMounts:
+        - name: keybr-data
+          mountPath: /mnt
+          readOnly: true
       securityContext:
         runAsUser: 1000
         runAsGroup: 1000
-- 
cgit v1.2.3