Removing unused nfs server (used docker 1 image)

silta-cluster/Chart.lock

@@ -1,13 +1,13 @@
 dependencies:
 - name: ingress-nginx
   repository: https://kubernetes.github.io/ingress-nginx
-  version: 4.13.4
+  version: 4.13.5
 - name: traefik
   repository: file://../legacy_traefik
   version: 1.87.7
 - name: ingress-nginx
   repository: https://kubernetes.github.io/ingress-nginx
-  version: 4.13.4
+  version: 4.13.5
 - name: pxc-operator
   repository: https://percona.github.io/percona-helm-charts/
   version: 1.12.2
@@ -29,11 +29,8 @@ dependencies:
 - name: nfs-subdir-external-provisioner
   repository: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner
   version: 4.0.18
-- name: nfs-subdir-external-provisioner
-  repository: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner
-  version: 4.0.18
 - name: docker-registry
   repository: https://twuni.github.io/docker-registry.helm
   version: 2.1.0
-digest: sha256:af541ba31e0516ab8c82a94c5a651dffca67956b790b7781391ba220c1aeb3f0
-generated: "2025-11-06T16:12:05.039910552+02:00"
+digest: sha256:fa94e3a3d44403f63af4b6fff089564ba00bc638f30510a85546fd0bf07a1630
+generated: "2026-01-19T15:13:49.077419682+02:00"

silta-cluster/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: "1.0"
 description: Setup a Silta Kubernetes cluster.
 name: silta-cluster
-version: 1.13.1
+version: 1.14.0
 # csi-rclone external provisioner requires kubernetes 1.20+
 # https://github.com/kubernetes-csi/external-provisioner?tab=readme-ov-file#compatibility
 kubeVersion: '>=1.20.0-0'
@@ -52,11 +52,6 @@ dependencies:
   repository: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner
   version: 4.0.x
   condition: nfs-subdir-external-provisioner.enabled
-- name: nfs-subdir-external-provisioner
-  repository: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner
-  version: 4.0.x
-  alias: silta-shared-nfs
-  condition: silta-shared-nfs.enabled
 - name: docker-registry
   repository: https://twuni.github.io/docker-registry.helm
   version: 2.1.x

silta-cluster/templates/certificate.yaml

@@ -50,6 +50,8 @@ spec:
           - registry.{{ .Values.clusterDomain }}
           {{- end }}
 {{- end }}
+  privateKey:
+    rotationPolicy: "Always"
 ---
 {{- else if eq .Values.ssl.issuer "selfsigned" }}
 apiVersion: {{ include "silta-cluster.cert-manager-api-version" . | trim }}
@@ -80,6 +82,8 @@ spec:
   issuerRef:
     name: {{ .Values.ssl.issuer }}
     kind: ClusterIssuer
+  privateKey:
+    rotationPolicy: "Always"
 ---
 {{- else if eq .Values.ssl.issuer "custom" }}
 apiVersion: v1

silta-cluster/templates/tls-default-certificate.yaml

@@ -16,4 +16,6 @@ spec:
     # We can reference ClusterIssuers by changing the kind here.
     # The default value is Issuer (i.e. a locally namespaced Issuer)
     kind: ClusterIssuer
+  privateKey:
+    rotationPolicy: "Always"
 {{- end }}

silta-cluster/values.yaml

@@ -378,73 +378,6 @@ nfs-subdir-external-provisioner:
     repository: docker.io/wunderio/nfs-subdir-external-provisioner
     tag: v5.0
 
-# Uses nfs-subdir-external-provisioner. 
-# see: https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner/blob/master/charts/nfs-subdir-external-provisioner/values.yaml
-silta-shared-nfs:
-  enabled: false
-  nfs:
-    server: silta-cluster-nfs-server.silta-cluster.svc.cluster.local
-    path: /
-  storageClass:
-    name: silta-shared-nfs
-    # Set volume bindinng mode - Immediate or WaitForFirstConsumer
-    volumeBindingMode: WaitForFirstConsumer
-    pathPattern: "${.PVC.namespace}/${.PVC.annotations.storage.silta/storage-path}"
-    onDelete: delete
-  image:
-    repository: docker.io/wunderio/nfs-subdir-external-provisioner
-    tag: v5.0
-
-nfs-server:
-  enabled: false
-  image: k8s.gcr.io/volume-nfs
-  imageTag: 0.8
-  imagePullPolicy: IfNotPresent
-  # Kubernetes resource assignments.
-  resources:
-    requests:
-      cpu: 10m
-      memory: 256M
-    limits:
-      cpu: 100m
-      memory: 512M
-  persistence:    
-    rclone:
-      enabled: false
-      image: rclone/rclone:1.63
-      # bucket
-      remotePath: ""
-      # rclone config file content (except [remote] header)
-      # https://rclone.org/docs/#config-config-file
-      backend_config: |
-        # type = google cloud storage
-        # project_number = test-project-123
-        # service_account_credentials = { escaped json, convert newlines to \n }
-        # location = region
-        # links = true
-        # gcs_directory_markers = true
-        # bucket_policy_only = true
-      # rclone mount commmand flags
-      # https://rclone.org/commands/rclone_mount/
-      params:
-        cache-chunk-clean-interval: 15m
-        dir-cache-time: 5s
-        vfs-cache-mode: writes
-        cache-info-age: 72h
-        allow-non-empty: true
-        allow-other: true
-      resources:
-        requests:
-          cpu: 10m
-          memory: 128M
-    data:
-      size: 10Gi
-      # storageClassName: standard
-      # Provide driver name if using CSI driver backed storage class (optional).
-      # csiDriverName: csi-driver-name
-      accessModes:
-        - ReadWriteOnce
-
 # This should be replaced when an actual sidecar implementation is available. 
 # https://github.com/kubernetes/enhancements/issues/753#issuecomment-713471597
 k8sControllerSidecars: