Local volume storage driver

contexts/colima/blueprint.yaml

@@ -25,6 +25,13 @@ kustomize:
   path: policy/resources
   dependsOn:
   - policy-base
+- name: csi
+  path: csi
+  dependsOn:
+  - policy-resources
+  components:
+  - openebs
+  - openebs/dynamic-localpv
 - name: lb-base
   path: lb/base
   dependsOn:

contexts/colima/terraform/cluster/talos.tfvars

@@ -17,6 +17,9 @@ controlplanes = [{
   node     = "10.5.0.2"
 }]
 
+// A YAML string of worker config patches to apply
+worker_config_patches = "\"machine\":\n  \"kubelet\":\n    \"extraMounts\":\n    - \"destination\": \"/var/local\"\n      \"options\":\n      - \"rbind\"\n      - \"rw\"\n      \"source\": \"/var/local\"\n      \"type\": \"bind\""
+
 // Machine config details for workers
 workers = [{
   endpoint = "10.5.0.11:50000"

contexts/docker-desktop/blueprint.yaml

@@ -25,6 +25,13 @@ kustomize:
   path: policy/resources
   dependsOn:
   - policy-base
+- name: csi
+  path: csi
+  dependsOn:
+  - policy-resources
+  components:
+  - openebs
+  - openebs/dynamic-localpv
 - name: ingress-base
   path: ingress/base
   dependsOn:

contexts/docker-desktop/terraform/cluster/talos.tfvars

@@ -17,6 +17,9 @@ controlplanes = [{
   node     = "127.0.0.1"
 }]
 
+// A YAML string of worker config patches to apply
+worker_config_patches = "\"machine\":\n  \"kubelet\":\n    \"extraMounts\":\n    - \"destination\": \"/var/local\"\n      \"options\":\n      - \"rbind\"\n      - \"rw\"\n      \"source\": \"/var/local\"\n      \"type\": \"bind\""
+
 // Machine config details for workers
 workers = [{
   endpoint = "127.0.0.1:50001"

kustomize/csi/kustomization.yaml

@@ -0,0 +1,2 @@
+resources: 
+  - namespace.yaml

kustomize/csi/namespace.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: system-csi
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged

kustomize/csi/openebs/dynamic-localpv/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+patches:
+  - path: patches/helm-release.yaml
+resources:
+  - storageclass.yaml

kustomize/csi/openebs/dynamic-localpv/patches/helm-release.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: openebs
+  namespace: system-csi
+spec:
+  values:
+    localpv-provisioner:
+      localpv:
+        enabled: true
+        basePath: ${LOCAL_VOLUME_PATH}

kustomize/csi/openebs/dynamic-localpv/storageclass.yaml

@@ -0,0 +1,31 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: local
+  annotations:
+    openebs.io/cas-type: local
+    cas.openebs.io/config: |
+      - name: StorageType
+        value: hostpath
+      - name: BasePath
+        value: ${LOCAL_VOLUME_PATH}
+provisioner: openebs.io/local
+reclaimPolicy: Delete
+volumeBindingMode: WaitForFirstConsumer
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: single
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
+    openebs.io/cas-type: local
+    cas.openebs.io/config: |
+      - name: StorageType
+        value: hostpath
+      - name: BasePath
+        value: ${LOCAL_VOLUME_PATH}
+provisioner: openebs.io/local
+reclaimPolicy: Delete
+volumeBindingMode: WaitForFirstConsumer

kustomize/csi/openebs/helm-release.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: openebs
+  namespace: system-csi
+spec:
+  interval: 5m
+  timeout: 5m
+  chart:
+    spec:
+      chart: openebs
+      # renovate: datasource=helm depName=openebs package=openebs helmRepo=https://openebs.github.io/openebs
+      version: 4.1.1
+      sourceRef:
+        kind: HelmRepository
+        name: openebs
+        namespace: system-gitops
+  values:
+    localpv-provisioner:
+      localpv:
+        enabled: false
+      hostpathClass:
+        enabled: false
+    zfs-localpv:
+      enabled: false
+    lvm-localpv:
+      enabled: false
+    mayastor:
+      enabled: false
+      base:
+        metrics:
+          enabled: false
+    engines:
+      local:
+        lvm:
+          enabled: false
+        zfs:
+          enabled: false
+      replicated:
+        mayastor:
+          enabled: false

kustomize/csi/openebs/helm-repository.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: openebs
+  namespace: system-gitops
+spec:
+  interval: 10m
+  timeout: 5m
+  url: https://openebs.github.io/openebs

kustomize/csi/openebs/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+resources:
+  - helm-repository.yaml
+  - helm-release.yaml

windsor.yaml

@@ -42,6 +42,8 @@ contexts:
         count: 1
         cpu: 4
         memory: 4
+        volumes:
+        - ${WINDSOR_PROJECT_ROOT}/.volumes:/var/local
     network:
       cidr_block: 10.5.0.0/16
       loadbalancer_ips:
@@ -99,6 +101,8 @@ contexts:
         - 8443:30443/tcp
         - 9292:30292/tcp
         - 8053:30053/udp
+        volumes:
+        - ${WINDSOR_PROJECT_ROOT}/.volumes:/var/local
     network:
       cidr_block: 10.5.0.0/16
     dns: