mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-07-27 08:00:46 +00:00
105 lines
5.9 KiB
YAML
105 lines
5.9 KiB
YAML
# Longhorn Helm Values
|
|
defaultSettings:
|
|
# 2 replicas so volumes survive single-node loss
|
|
defaultReplicaCount: 2
|
|
# Allow full disk usage on single-node
|
|
storageOverProvisioningPercentage: 100
|
|
storageMinimalAvailablePercentage: 10
|
|
# Auto-salvage on node reboot (single-node)
|
|
autoSalvage: true
|
|
# Disable strict flushing for better single-node performance
|
|
strictSyncReplicas: false
|
|
# Toleration for system-managed Longhorn pods (instance-manager, engine,
|
|
# replica, CSI plugin). These pods are created dynamically by
|
|
# longhorn-manager — NOT from Helm templates — so their tolerations must be
|
|
# set here via the `taintToleration` setting (semicolon-separated `kubectl
|
|
# taint` syntax), not via per-component `tolerations` blocks.
|
|
#
|
|
# The P330 node is tainted `dedicated=failover:NoSchedule` (see
|
|
# infra/p330/kube/variables.tf). Tolerating it lets Longhorn schedule
|
|
# engine/replica pods there so a volume can be failed over to the P330.
|
|
# The control-plane taint is also tolerated defensively, although with
|
|
# allowSchedulingOnControlPlanes=true on the R740 it is not actually applied.
|
|
taintToleration: dedicated=failover:NoSchedule;node-role.kubernetes.io/control-plane:NoSchedule
|
|
persistence:
|
|
defaultClass: true
|
|
defaultClassReplicaCount: 2
|
|
# Retain volumes on PVC delete — safer during migration
|
|
reclaimPolicy: Retain
|
|
# Mount options for ext4
|
|
fstype: ext4
|
|
# longhorn-manager is a DaemonSet — it must run on every storage node,
|
|
# including the P330 failover node. The control-plane toleration is defensive
|
|
# (allowSchedulingOnControlPlanes=true means it is not actually applied on the
|
|
# R740, but keeps things correct if that ever changes).
|
|
longhornManager:
|
|
tolerations:
|
|
- key: ENC[AES256_GCM,data:DDNTXJiwP2LQiOmqgf/L6tLIZiFgqh42dLDXj8xomGv7rlUP9A==,iv:eu6vnl3EiLu1DWWDWlxkQNcN6/uEhSkpufw7L9Ikr14=,tag:DJOMo8LDGmzkqvIEkfCTHg==,type:str]
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
# Tolerate the failover taint so longhorn-manager runs on the P330
|
|
- key: ENC[AES256_GCM,data:rbWq0sruC6zC,iv:Eq5izQ4LXZ90Bhf1BJ7V9/Xo7HVMULeDHZ6NgItZfGQ=,tag:ixJt7YD4cBy+SrG2WVn0ng==,type:str]
|
|
value: ENC[AES256_GCM,data:wxGNkS97rg8=,iv:bBGGqcwibhXE0zkH+ZJEVgr20ogu7JwQxxDXqJcMdsQ=,tag:VLBQh8vRl1SiYB9S/vwLeg==,type:str]
|
|
operator: Equal
|
|
effect: NoSchedule
|
|
# longhorn-driver (CSI provisioner/attacher deployer) — tolerate the same
|
|
# taints so CSI operations work from the failover node.
|
|
longhornDriver:
|
|
tolerations:
|
|
- key: ENC[AES256_GCM,data:1EBSG4hL4heCnLFJYzTNaQWtFU3v6xwTlG+Y9/H4p5d0TZdFog==,iv:9ILcNXXzxzG5CYA4Ny7bKHBI581B1qJC3OBUObScxbQ=,tag:4B4JaFO0tfyVA6w7ypCY6g==,type:str]
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
- key: ENC[AES256_GCM,data:ZSC5qg+ChOkI,iv:rIq8j7L7F641kWDzcSV9lrYxhHggT1FTZ8WF53vxvV0=,tag:Hj4RlF3usdIQi0G6Ecmdbg==,type:str]
|
|
value: ENC[AES256_GCM,data:YfiuCv2EKec=,iv:+6i5CT1ToCKy1gFtVVIFv5FLQaJaKHx4vQk8b0IBy3U=,tag:zHgzNuijbwI1QbvuLnZNvw==,type:str]
|
|
operator: Equal
|
|
effect: NoSchedule
|
|
# longhorn-ui — tolerate the same taints so the UI is reachable even if it
|
|
# lands on the failover node.
|
|
longhornUI:
|
|
replicas: 1
|
|
tolerations:
|
|
- key: ENC[AES256_GCM,data:n4UdwssGYhHQgDTpCpu+WgIPsdNc8uAaZtnURZt0/C3VfeLR4w==,iv:mqy0GqHN0KxtkETS7psu61Mr1oGmtPDhg2vQhVDas6c=,tag:uUd+NY90XK3i0aigc5ndCg==,type:str]
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
- key: ENC[AES256_GCM,data:isSkUNqax+AU,iv:jWgZyZL9VMmzYqoLCUkIiUuy1iBeOm2RE5CjZGCcXxQ=,tag:714V0YGb7jqebC4IRX/phw==,type:str]
|
|
value: ENC[AES256_GCM,data:Qbtu1wgV1oI=,iv:RihD43IA1+C3m9OkXACGgd5lY9lDWCyzIcw/MCoSMvg=,tag:WzQtC4rT+uovS6s36DJWUw==,type:str]
|
|
operator: Equal
|
|
effect: NoSchedule
|
|
# Disable ingress for now
|
|
ingress:
|
|
enabled: false
|
|
# Default backup store (NFS target on TrueNAS).
|
|
defaultBackupStore:
|
|
# NFS endpoint exposing the TrueNAS dataset as a backup target.
|
|
backupTarget: nfs://truenas.lan:/mnt/fast_app_data/longhorn-backup
|
|
# No credentials required for an anonymously-readable NFS export.
|
|
backupTargetCredentialSecret: ""
|
|
# Poll the backup target every 5 minutes for new/removed backups.
|
|
pollInterval: 300
|
|
sops:
|
|
lastmodified: "2026-07-26T08:44:08Z"
|
|
mac: ENC[AES256_GCM,data:4shHlVWcVol/Z8b+5+tz6shT8x6gCZz2xhYv1VT7dHlgcYWWgq2V5mbGUtsVmWFzkGPC5rYvU3dUEiEkl0zb6Q1rP/fD6xQmlyIgH/ioHrfCvjorY5Rv8t4OFH/TyBK9hMwC+iFdAUJOdE9vYQoDmUMTGz6XwWiDY3PxRv1X9D4=,iv:DDDiStImg5qH2QP9lcSyW5+b+1P1mk6F0TWkt9p2syo=,tag:zJnZ455gsXPkE4Lfup2Rcg==,type:str]
|
|
pgp:
|
|
- created_at: "2026-07-26T08:44:08Z"
|
|
enc: |-
|
|
-----BEGIN PGP MESSAGE-----
|
|
|
|
hQIMA7uy4qQr71wiAQ/9FsBtkggrKwHfh5FFRUFkyqCU596d/R7ZEvsMP7zzCH9H
|
|
VAAYJxl8D6/KY5EavpeZH4s2ZnlzZjlb/qS2CKpSzXuN7ADPnK10cBxxAOQLp6KF
|
|
pqdkv6x5MyWbfv87IzM8cI0D/jlG2/iZPfBZy/YU4Rg8cefIl82vNgNADW2O68bK
|
|
w1VS75AYKmUfXZ2vqz+wX46YcjdXkrvRwzM9lzfIm2Q2dKMqBKSYzxMICZ/hWGRj
|
|
t33KbZLKC1Kg0NmYOY4GCt8hi6Ck4TjKvzxktsEpXYFDhWzXe9nr+axtrfypLrAn
|
|
fcLCQV1FSovMK+P4JxB/dd0u+F3RR500F3tBJPQ1xs1Rc1f8Cd2Ynr/3LWtTstkq
|
|
JyOfLFAj4/LG8o7ub/FSvLZZI052iRLZqlIIe0cFTqCz31yVEJOnLJWmME36hDEm
|
|
rfd3X9IvixfwWVTa3K0TxZta7u0Q0DsqHIt3eLdeTJC3wY4J+A/vUvPFv137YEqp
|
|
O+/ALTbwK7ViSQIupjr4kEcklBtiu9myNi3u8JNg67/XHwahCh0tfGk4jCevve5S
|
|
dDk4Ud7469LuDwYSZw0RdwuU89jQivvsp8/mZpQIoSVzl//iEQ2EOAff1gMfiPoj
|
|
1MrwGtrrMAo+2Uoxacd7LfFn/l1zRNiGw1rX21NzswmzIU84US4Grv9LGealQ8TS
|
|
XgH+datMRHIAPKcYY0u/B/PfyoKArlPUzQsIQOm02+s1zuvK/dArKxgObKTAr/u4
|
|
uNuVH3ObUVMb6VX4iwlxfS+VKpjotTbgY2TJfV46kGC3JJ0w1LdjEyJbpYlIz/k=
|
|
=HWEp
|
|
-----END PGP MESSAGE-----
|
|
fp: DC6910268E657FF70BA7EC289974494E76938DDC
|
|
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
|
|
version: 3.10.2
|