Shahab Dogar
0d4f700b89
feat: NixOS | move cluster config to /master fix: update all stuff for office network feat: PiHole | set up DHCP server chore: Cloudflare | delete api token secret chore: remove external-dns annotations from ingressed services fix: PiHole | turn off liveness checks due to host ip fix: GiteaActions | use encrypted storage for runner fix: ElasticSearch | use encrypted volumes for storage fix: Pihole | static mac addresses all caps feat: NixOS | manual network configuration fix: NixOS | k3s cluster init point to static ip with tls-san chore: Postgres | move certificate resources into own file + reduce volume size fix: Pihole | add ingress class name sec: NixOS | remove token from git
19 lines
694 B
YAML
19 lines
694 B
YAML
---
|
|
kind: StorageClass
|
|
apiVersion: storage.k8s.io/v1
|
|
metadata:
|
|
name: longhorn-crypto
|
|
namespace: longhorn-system
|
|
provisioner: driver.longhorn.io
|
|
allowVolumeExpansion: true
|
|
parameters:
|
|
numberOfReplicas: "3"
|
|
staleReplicaTimeout: "2880" # 48 hours in minutes
|
|
encrypted: "true"
|
|
csi.storage.k8s.io/provisioner-secret-name: "longhorn-encryption"
|
|
csi.storage.k8s.io/provisioner-secret-namespace: "longhorn-system"
|
|
csi.storage.k8s.io/node-publish-secret-name: "longhorn-encryption"
|
|
csi.storage.k8s.io/node-publish-secret-namespace: "longhorn-system"
|
|
csi.storage.k8s.io/node-stage-secret-name: "longhorn-encryption"
|
|
csi.storage.k8s.io/node-stage-secret-namespace: "longhorn-system"
|