Added Persistent Volume Claim reference (#3454)

* Added Persistent Volume Claim reference * Added separate PVC * Correct PVC type for storing shoots * Change storage class, and change the flag to global * Changed volume type to standard-rwo * Increased volume size
kyma-project · Jul 23, 2024 · 1f53cd6 · 1f53cd6
1 parent 9330008
commit 1f53cd6
Show file tree

Hide file tree

Showing 3 changed files with 25 additions and 6 deletions.
diff --git a/resources/kcp/charts/provisioner/templates/deployment.yaml b/resources/kcp/charts/provisioner/templates/deployment.yaml
@@ -40,6 +40,10 @@ spec:
       serviceAccountName: {{ template "fullname" . }}
       nodeSelector:
         {{- toYaml .Values.deployment.nodeSelector | nindent 8 }}
+      {{- if .Values.global.shootSpecDump.enabled }}
+      securityContext:
+        fsGroup: 2000
+      {{ end }}
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.global.containerRegistry.path }}/{{ .Values.global.images.provisioner.dir }}/control-plane/provisioner:{{ .Values.global.images.provisioner.version }}"
@@ -145,7 +149,7 @@ spec:
             - name: APP_ENQUEUE_IN_PROGRESS_OPERATIONS
               value: "true"
             - name: APP_GARDENER_ENABLE_DUMP_SHOOT_SPEC
-              value: {{ .Values.gardener.enableDumpShootSpec | quote }}
+              value: {{ .Values.global.shootSpecDump.enabled | quote }}
           volumeMounts:
         {{if .Values.gardener.auditLogExtensionConfigMapName }}
             - mountPath: /gardener/tenant
@@ -165,7 +169,7 @@ spec:
               mountPath: /secrets/cloudsql-sslrootcert
               readOnly: true
         {{- end }}
-        {{- if .Values.gardener.enableDumpShootSpec }}
+        {{- if .Values.global.shootSpecDump.enabled }}
             - name: testdata-storage
               mountPath: /testdata/provisioner
         {{- end }}
@@ -213,10 +217,10 @@ spec:
           {{- end }}
         {{- end}}
       volumes:
-      {{- if .Values.gardener.enableDumpShootSpec }}
+      {{- if .Values.global.shootSpecDump.enabled }}
       - name: testdata-storage
-        emptyDir:
-          sizeLimit: 500Mi
+        persistentVolumeClaim:
+          claimName: test-prov-shoot-spec-storage
      {{- end}}
       {{- if and (eq .Values.global.database.embedded.enabled false) (eq .Values.global.database.cloudsqlproxy.enabled true) (eq .Values.global.database.cloudsqlproxy.workloadIdentity.enabled false)}}
       - name: cloudsql-instance-credentials

diff --git a/resources/kcp/charts/provisioner/templates/pvc.yaml b/resources/kcp/charts/provisioner/templates/pvc.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.global.shootSpecDump.enabled }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: test-prov-shoot-spec-storage
+  namespace: kcp-system
+spec:
+  storageClassName: standard-rwo
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+{{- end }}
diff --git a/resources/kcp/charts/provisioner/values.yaml b/resources/kcp/charts/provisioner/values.yaml
@@ -1,4 +1,6 @@
 global:
+  shootSpecDump:
+    enabled: false
   containerRegistry:
     path: europe-docker.pkg.dev/kyma-project
   images:
@@ -56,7 +58,6 @@ gardener:
   defaultEnableKubernetesVersionAutoUpdate: false
   defaultEnableMachineImageVersionAutoUpdate: false
   defaultEnableIMDSv2: false
-  enableDumpShootSpec: false
 
 support:
   enabledCreatingRoleBindingForAdmin: false