diff --git a/stacks/speedtest/main.tf b/stacks/speedtest/main.tf index 05b481aa..002ede72 100644 --- a/stacks/speedtest/main.tf +++ b/stacks/speedtest/main.tf @@ -58,33 +58,16 @@ resource "random_id" "secret_key" { byte_length = 32 # 32 bytes × 2 hex chars = 64 hex characters } -resource "kubernetes_persistent_volume_claim" "config_proxmox" { - wait_until_bound = false - metadata { - name = "speedtest-config-proxmox" - namespace = kubernetes_namespace.speedtest.metadata[0].name - annotations = { - "resize.topolvm.io/threshold" = "10%" - "resize.topolvm.io/increase" = "100%" - "resize.topolvm.io/storage_limit" = "5Gi" - } - } - spec { - access_modes = ["ReadWriteOnce"] - storage_class_name = "proxmox-lvm" - resources { - requests = { - storage = "1Gi" - } - } - } - lifecycle { - # The autoresizer expands requests.storage up to storage_limit and - # PVCs can't shrink. Without this, every TF apply tries to revert - # to the spec value, K8s rejects the shrink, and the PVC ends up - # in Terminating-but-in-use limbo. - ignore_changes = [spec[0].resources[0].requests] - } +# Config on NFS. Migrated off proxmox-lvm 2026-06-05 for LUN-cap relief — +# speedtest-tracker is MySQL-backed (config dir = logs + Laravel config, no +# embedded DB), NFS-safe. See docs/plans/2026-06-05-block-storage-harden-nfs-design.md +module "nfs_speedtest" { + source = "../../modules/kubernetes/nfs_volume" + name = "speedtest-config-nfs" + namespace = kubernetes_namespace.speedtest.metadata[0].name + nfs_server = var.nfs_server + nfs_path = "/srv/nfs/speedtest" + storage = "5Gi" } resource "kubernetes_deployment" "speedtest" { @@ -202,7 +185,7 @@ resource "kubernetes_deployment" "speedtest" { volume { name = "config" persistent_volume_claim { - claim_name = kubernetes_persistent_volume_claim.config_proxmox.metadata[0].name + claim_name = module.nfs_speedtest.claim_name } } }