From 1ea17d682661e80d126a1862dd49b07b88908988 Mon Sep 17 00:00:00 2001
From: Daren Lord <daren@lordhometech.com>
Date: Mon, 18 Nov 2024 03:10:31 +0000
Subject: [PATCH] csi-driver-smb: fix namespace

---
 .../apps/storage/csi-driver-smb/ks.yaml       | 81 +++++++++++++++++++
 kubernetes/apps/storage/kustomization.yaml    |  7 ++
 kubernetes/apps/storage/namespace.yaml        |  9 +++
 3 files changed, 97 insertions(+)
 create mode 100644 kubernetes/apps/storage/csi-driver-smb/ks.yaml
 create mode 100644 kubernetes/apps/storage/kustomization.yaml
 create mode 100644 kubernetes/apps/storage/namespace.yaml

diff --git a/kubernetes/apps/storage/csi-driver-smb/ks.yaml b/kubernetes/apps/storage/csi-driver-smb/ks.yaml
new file mode 100644
index 00000000..e4c47cb4
--- /dev/null
+++ b/kubernetes/apps/storage/csi-driver-smb/ks.yaml
@@ -0,0 +1,81 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app csi-driver-smb
+  namespace: flux-system
+spec:
+  targetNamespace: storage
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  dependsOn:
+    - name: external-secrets-stores
+  path: ./kubernetes/apps/storage/csi-driver-smb/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: false
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app csi-driver-smb-storage-classes
+  namespace: flux-system
+spec:
+  targetNamespace: storage
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  dependsOn:
+    - name: csi-driver-smb
+  path: ./kubernetes/apps/storage/csi-driver-smb/storage-classes
+  prune: true
+  force: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: false
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m
+  patches:
+    - target:
+        kind: StorageClass
+      patch: |
+        - op: add
+          path: /volumeBindingMode
+          value: Immediate
+        - op: add
+          path: /allowVolumeExpansion
+          value: true
+        - op: add
+          path: /reclaimPolicy
+          value: Delete
+        - op: add
+          path: /parameters/onDelete
+          value: retain
+        - op: add
+          path: /parameters/csi.storage.k8s.io~1node-stage-secret-name
+          value: csi-driver-smb
+        - op: add
+          path: /parameters/csi.storage.k8s.io~1node-stage-secret-namespace
+          value: storage
+        - op: add
+          path: /mountOptions
+          value:
+            - "dir_mode=0775"
+            - "file_mode=0664"
+            - "uid=0"
+            - "gid=100"
+            - noperm
+            - mfsymlinks
+            - noserverino
+#            - multichannel
+#            - max_channels=4
diff --git a/kubernetes/apps/storage/kustomization.yaml b/kubernetes/apps/storage/kustomization.yaml
new file mode 100644
index 00000000..742becfa
--- /dev/null
+++ b/kubernetes/apps/storage/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./namespace.yaml
+  - ./csi-driver-smb/ks.yaml
diff --git a/kubernetes/apps/storage/namespace.yaml b/kubernetes/apps/storage/namespace.yaml
new file mode 100644
index 00000000..097b8c80
--- /dev/null
+++ b/kubernetes/apps/storage/namespace.yaml
@@ -0,0 +1,9 @@
+---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: storage
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    pod-security.kubernetes.io/enforce: privileged