cluster ip for nfs-photo

clusters/base/apps/webdav/pv-pvc-data.yaml

@@ -48,7 +48,11 @@ spec:
   mountOptions:
     - nfsvers=4.1
   nfs:
-    server: nfs-photo.nfs.svc.cluster.local
+    # pinned ClusterIP, not the service DNS name - kubelet's in-tree kernel
+    # NFS client runs in the node's host network namespace and can't
+    # reliably resolve/route Kubernetes Service DNS names. See nfs-photo's
+    # helmrelease.yaml (service.app.clusterIP) for the matching pin.
+    server: 10.43.166.34
     path: /export
   claimRef:
     namespace: webdav

clusters/base/apps/webdav/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: webdav-secrets
     namespace: webdav
 stringData:
-    WEBDAV_USERNAME: ENC[AES256_GCM,data:wreaqiQ=,iv:NjPmh2Vy8kQSNqbmP2w756gKssunbngrh1/YOHpYk1c=,tag:Bpq3fDGrugsy4h8slSHUTA==,type:str]
-    WEBDAV_PASSWORD: ENC[AES256_GCM,data:cDE7ZutFE61/SFU7e2DWwZoJwGJWTlAd5ln+nw817QYGTH5ddFX8cCfYBn+TDULL,iv:pHSzX45ezb+yEVSNB8w0Ryn7nCkaS5VbPtkTBNgImhw=,tag:YA0UuArp3nD71O7bzZRDZQ==,type:str]
+    WEBDAV_USERNAME: ENC[AES256_GCM,data:sqCM05U=,iv:KcrRd64cAv+grM4DkAw5bPuRUPGHSh7yyjlF+A1ho/g=,tag:8Tz3rf+65R3gxKu+pmcBng==,type:str]
+    WEBDAV_PASSWORD: ENC[AES256_GCM,data:TQlc8SOP6TuWt2atw08xfJULGrQSTYCjpl+FpaZP0Wfn2ymFbv2JGadCtoAUv04N,iv:U7KRThjtRbl4d4INE/n036vVQjmwJp4XzeLqZ5u15Wg=,tag:GFvWO7972H0KKEw0ZzmlTA==,type:str]
 sops:
     age:
         - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaUVJrSDZoOWVaUXVRRU5E
-            U3JLcUdPRXhaQjJLaEpONldRWUs3YlJGRlZvClNpbEZXSUpYVXRWOWhabFgzQ2tv
-            T3piN0c3L1dhbFAxVjlLd01rUTVDVmsKLS0tIGdsbWZiZG51T25pUDMrL1Znbytr
-            NWJNanRaL3RxQ2ZMdkRkQU41b1NXWUUKTspDnmDoG5lkWTWZWCLKBfM6c2FP9/cl
-            dkAr9e9jvWYXdH4CUMNlpPv3mysiR4F9kbNMPlWmhMlgd+mg9ZeqWw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmSlJ4VEM4ZWxkN2JsVzdl
+            SXpCb2Q5ZmpOMDI1TFJrR3FoYitRdWM3Z0I0CkFTSTRXZWxmVGhuZGNjR1hRNTBI
+            STJYU1ZQdFdvbDM4TlBzZEVPMFpHOFUKLS0tIFFQbmVsampWb2xybVF5aXRJRUI5
+            aEJkcjRLVksrb1NMT3NJeTQ2T3ZyaWMK8gGQ5AlltBl0KJxiYZAP/xOffAhvDg6U
+            5KWEGiJViybi5KUXXCC78zxpXL1L+TNumd7W6lP5YdCZ9fSz2olqog==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:27:13Z"
-    mac: ENC[AES256_GCM,data:3NobxX0yW/Cu5ltV1M8D4aiAk0RtEPrKsxWui4kcgEgGOM+YRxrIhiaMZFBM/GuwDNwMiK2N0UIlHv4Gb+0R0L2vMyipyqAwIJsUAz/2627V2MrOtJ6Fet0FNzK/TnriYmf0YSHbOjOtFXDFMwEso0j5vJ2/T08xH9FRK17Tmbc=,iv:G2USzh2loehfoxytaumtDcp0AD6bvEOVCbb0To3iVVM=,tag:y8dr28UfHpKVApo756RlwQ==,type:str]
+    lastmodified: "2026-08-26T10:27:21Z"
+    mac: ENC[AES256_GCM,data:uYQobXPkBdAAnsjpNopObMm94UugDjKTGLDsZtHKytKGgGEVuZuAanTT35XCg3ZdfuFAyweXueXigbs//r96XlLaDW2Bh2AYjmDC4czoMI3UBZhIeT0M7a6/TVq8poNASvWjNJ+p/8xOc7Cf5+0ttiEozn09qjyy64u9ESpBfNE=,iv:zh6HcSoZeVcpoJGsJboRqY8DI9X3kdUNoBIiOB/tQGo=,tag:6YWFpEp7unbMpvIDiDBk8g==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0