From 853a96cb576dfbd0152e61b7c21da7790e956778 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 1 Mar 2026 23:42:23 +0000
Subject: [PATCH] [ci skip] migrate privatebin, resume, speedtest NFS volumes
 to CSI PV/PVC

Pilot migration: replace inline nfs {} volumes with CSI-backed PV/PVC
using nfs-truenas StorageClass (soft,timeo=30,retrans=3 mount options).
---
 stacks/privatebin/main.tf | 13 ++++++++++---
 stacks/resume/main.tf     | 13 ++++++++++---
 stacks/speedtest/main.tf  | 13 ++++++++++---
 3 files changed, 30 insertions(+), 9 deletions(-)

diff --git a/stacks/privatebin/main.tf b/stacks/privatebin/main.tf
index e286fc78..cf1d08a7 100644
--- a/stacks/privatebin/main.tf
+++ b/stacks/privatebin/main.tf
@@ -18,6 +18,14 @@ module "tls_secret" {
   tls_secret_name = var.tls_secret_name
 }
 
+module "nfs_data" {
+  source     = "../../modules/kubernetes/nfs_volume"
+  name       = "privatebin-data"
+  namespace  = kubernetes_namespace.privatebin.metadata[0].name
+  nfs_server = var.nfs_server
+  nfs_path   = "/mnt/main/privatebin"
+}
+
 resource "kubernetes_deployment" "privatebin" {
   metadata {
     name      = "privatebin"
@@ -70,9 +78,8 @@ resource "kubernetes_deployment" "privatebin" {
 
         volume {
           name = "data"
-          nfs {
-            path   = "/mnt/main/privatebin"
-            server = var.nfs_server
+          persistent_volume_claim {
+            claim_name = module.nfs_data.claim_name
           }
         }
       }
diff --git a/stacks/resume/main.tf b/stacks/resume/main.tf
index ad985088..929f7b1b 100644
--- a/stacks/resume/main.tf
+++ b/stacks/resume/main.tf
@@ -122,6 +122,14 @@ resource "kubernetes_service" "printer" {
   }
 }
 
+module "nfs_data" {
+  source     = "../../modules/kubernetes/nfs_volume"
+  name       = "resume-data"
+  namespace  = kubernetes_namespace.resume.metadata[0].name
+  nfs_server = var.nfs_server
+  nfs_path   = "/mnt/main/resume"
+}
+
 # Reactive Resume app
 resource "kubernetes_deployment" "resume" {
   metadata {
@@ -251,9 +259,8 @@ resource "kubernetes_deployment" "resume" {
         }
         volume {
           name = "data"
-          nfs {
-            server = var.nfs_server
-            path   = "/mnt/main/resume"
+          persistent_volume_claim {
+            claim_name = module.nfs_data.claim_name
           }
         }
       }
diff --git a/stacks/speedtest/main.tf b/stacks/speedtest/main.tf
index 5a2c6e2b..91813314 100644
--- a/stacks/speedtest/main.tf
+++ b/stacks/speedtest/main.tf
@@ -23,6 +23,14 @@ resource "random_id" "secret_key" {
   byte_length = 32 # 32 bytes × 2 hex chars = 64 hex characters
 }
 
+module "nfs_config" {
+  source     = "../../modules/kubernetes/nfs_volume"
+  name       = "speedtest-config"
+  namespace  = kubernetes_namespace.speedtest.metadata[0].name
+  nfs_server = var.nfs_server
+  nfs_path   = "/mnt/main/speedtest"
+}
+
 resource "kubernetes_deployment" "speedtest" {
   metadata {
     name      = "speedtest"
@@ -118,9 +126,8 @@ resource "kubernetes_deployment" "speedtest" {
         }
         volume {
           name = "config"
-          nfs {
-            server = var.nfs_server
-            path   = "/mnt/main/speedtest"
+          persistent_volume_claim {
+            claim_name = module.nfs_config.claim_name
           }
         }
       }