markdown-vault adaptation to nfs-ganesha

clusters/base/apps/markdown-vault-mcp/helmrelease.yaml

@@ -80,10 +80,7 @@ spec:
     persistence:
       vault:
         type: persistentVolumeClaim
-        accessMode: ReadWriteMany
-        size: 30Gi
-        storageClass: longhorn
-        retain: true
+        existingClaim: markdown-vault-mcp-vault
         globalMounts:
           - path: /vault
       state:

clusters/base/apps/markdown-vault-mcp/kustomization.yaml

@@ -4,3 +4,4 @@ resources:
   - helmrepository.yaml
   - helmrelease.yaml
   - secret.enc.yaml
+  - pv-pvc-vault.yaml

clusters/base/apps/markdown-vault-mcp/pv-pvc-vault.yaml

@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: markdown-vault-mcp-vault-nfs
+spec:
+  capacity:
+    storage: 30Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: ""
+  mountOptions:
+    - nfsvers=4.1
+  nfs:
+    server: 10.0.64.5
+    path: /exports/shared/documents
+  claimRef:
+    namespace: mcp
+    name: markdown-vault-mcp-vault
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: markdown-vault-mcp-vault
+  namespace: mcp
+  annotations:
+    helm.sh/resource-policy: keep
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  volumeName: markdown-vault-mcp-vault-nfs
+  resources:
+    requests:
+      storage: 30Gi

clusters/base/apps/markdown-vault-mcp/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: markdown-vault-mcp-secrets
     namespace: mcp
 stringData:
-    BEARER_TOKEN: ENC[AES256_GCM,data:zJj7Hvu23WDPsnELoYz67DNQxVFWP/XJwWxbkKU93Hz98Xy0u6z6kUzhNABHb2FnKJLvnQO007QXdCkQgyvcVQ==,iv:/jGGQY2WPQYdhjpi4WiD3ajGVSA8uf11WY2p45s++cs=,tag:3vZVnTGbO9QNTXVE4mM+NA==,type:str]
-    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:4OU2+r/kctg5N9K95qKsAV4EOj8nynLQnKoNdXRJmP5A/aiaDiuyxezZQ+q5xRuDgPHEEVZ2k2dsJPfYkia/oQ==,iv:nhO1vrSPdP/jvBMKLXKouYW2Q/yRP20h4nwcJ/AoWtg=,tag:tZyobhKSZhHmsw0wj4nZcQ==,type:str]
-    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:WJjPHcJB/wWSkTgohQuOmF+tFzulNXNZ2a/nvea2cpqSRzyZpMJlU+PkdcHNCONBxvg78hgdABdydB5bAi9dHA==,iv:9ED5hNcZoD0LNm7gd1i2PznYKKh00RSPK8ZDRRRYdwE=,tag:ZsLwobQ6LEp+XAtpljT9Cg==,type:str]
+    BEARER_TOKEN: ENC[AES256_GCM,data:F+OI9/NDhTrp0Df8Nw34V0pPvhvxwOfEOAus/2ES4/hBvQBoSK48QDq37/vG7Gz+pf07suz/UOEgBodCnsv+EA==,iv:uU08S1cqZUh8QY+2L+RwAUJ8876YgQ4dwxx8QRRgEn0=,tag:3u1BhYx99AiwnW5cBqACtA==,type:str]
+    OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:z3lGDLFVq4K382CaxH1TAh5mo0qH+ntW7Z35VJmNd8SW0PM6qCZPOZCYVEb8ogoowWIgww9/ToHjE3C+vrFaQA==,iv:DxZopMv0bFg4Ip94afEVK2YA1I8V53EOv2MVztiDcAA=,tag:FywQ6giuGP5yPqLXH11cow==,type:str]
+    OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:ezLL5YUoK7VDmpwpDmuWEjXoLrllQZim8EQTF7nUNDMRQa32L8u3LwAyAIxFzwUIlr0bIKzZ8M1YRDScDLoF7A==,iv:8u2A/EXGzod3s+DCLiRW/NbhA9ZdQNIJQf8Bvji1bW0=,tag:rUinS4QhECV2xQxzNJ3UAQ==,type:str]
 sops:
     age:
         - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTYU84V1Evb2VaVlJQYVFz
-            ei9WTEhmdytRNmdTdlF1VUlSOFN3VW04RURzCnlGWjlwcHRjSk5xcDdwRmNwSWpw
-            L1F5dlVDeS8yMnFXa2ZHRDRIZnV5ak0KLS0tIHYzT0hxWU9CazFIZnN3Q3BZMjN1
-            Q2NxMytWVG9pR05USnZFRTF0aE43VzgKWIhPxT/Iuy+wpU/Ssv7ykV2RG/L+J7wu
-            tnJOYKtHPZBHfXFb/+hs0KsAwih4QtnKw0kHNs+uWwEERkowqfPMaw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TndETkhQbVJYQ2J1RmlH
+            Q1FmV3lMdDhiaUJKSG4yVFAxbSt4STIwSEJBCkdLZU55UTFxWTArZXVIamVLa3NW
+            aDh3V0dxcUo5U21ERXRZc0lSdlhzMTQKLS0tIE1DTndKZzRVUE1uL0UwTUJTUzVI
+            UlRPMmJFSDJ5a283RjRKU0swVW80UW8K5lgskEw1wW9yPNAsCc47GvUYfiWTLg2Z
+            cPm3rOdIQePtixoh1IPdgkmAtL0sjQ8NwtIfBsxl1PlwANuGZgAS6A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:21:31Z"
-    mac: ENC[AES256_GCM,data:khW9h2LuZ9AcdaL8rtkkkECcYRgaWtVlpzKsUd2Zf7EfR0ezw4EkcoZAplb4k0Asn0hhET+zV4zSRybpwrFyUXubt2fQajeOd9oDipC+3J7zfPYkAreLX8ZaUOVr+WjixIbuKO3qZfNK44VZMZ45ITuKVLKSNVrtm05iZPnI/8o=,iv:mbqdVZaEhi6VCfQSF/nAD81Tp5nDSsOQX6BgK+FWr1I=,tag:odroXeRtwDr7kF80n1umsg==,type:str]
+    lastmodified: "2026-08-26T10:21:38Z"
+    mac: ENC[AES256_GCM,data:83Ez4lKbyRbtAHtEVPCjgh4EXbhprkofCqO4NK5vz6wumt8tlc850qjHh8VVw/ZjG/9AIP1EWHunJeaV3mA0M+QQhkr/FHK8aHr5tTtZb3QqYfqD/60ePXjXumZFoChp9U0/d/WCsh8ytVqjHnfYVowdzbIV/YkCqDEs22QXf20=,iv:UgUABY/yj6Y60PZvmeHj7pYNgMVkt7ir/RofICwhBDA=,tag:Lz/ZYKca8v3qB42xfUqjTg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0