Viktor Barzin fd0f4a0365 fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip]

6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-09 08:45:33 +00:00

2.6 KiB

Raw Blame History

Proxmox CSI Migration — Cleanup TODO

Date: 2026-04-03 Status: Pending (do when confident everything is stable) Prerequisites: All services healthy on proxmox-lvm for 1+ week

Context

The iSCSI → Proxmox CSI migration is complete. All 13 block PVCs are on proxmox-lvm, all 41 databases (21 PG + 20 MySQL) restored and verified. This doc tracks the remaining cleanup.

TODO

1. Remove democratic-csi iSCSI stack

Frees 5 pods (~500Mi RAM), removes unused CSI driver.

# Delete Helm release
KUBECONFIG=./config helm delete democratic-csi-iscsi -n iscsi-csi

# Delete namespace
kubectl delete namespace iscsi-csi

# Remove iscsi-truenas StorageClass (verify no PVCs reference it first)
kubectl get pvc -A | grep iscsi-truenas  # should only show orphaned PVCs
kubectl delete storageclass iscsi-truenas

# Remove Terraform stack (or mark as disabled)
# Option A: delete stacks/iscsi-csi/ directory
# Option B: keep for reference, remove from CI pipeline

2. Delete orphaned iSCSI PVCs

These are old copies from before the migration. No pods mount them.

# Verify nothing mounts them
for pvc in old-pg-data old-mysql-data; do
  kubectl get pods -n dbaas -o json | grep -q "$pvc" && echo "IN USE: $pvc" || echo "SAFE: $pvc"
done

# Delete helper PVCs
kubectl delete pvc old-pg-data old-mysql-data -n dbaas

# Delete old service PVCs
kubectl delete pvc nextcloud-data-iscsi -n nextcloud
kubectl delete pvc novelapp-data -n novelapp
kubectl delete pvc vaultwarden-data-iscsi -n vaultwarden
kubectl delete pvc ebooks-calibre-config-iscsi -n ebooks

3. Clean up TrueNAS iSCSI zvols

After deleting PVCs, the underlying PVs (reclaimPolicy: Retain) and TrueNAS zvols remain.

# Delete Released PVs
kubectl get pv | grep Released | grep iscsi-truenas | awk '{print $1}' | xargs kubectl delete pv

# SSH to TrueNAS and clean up zvols
ssh root@10.0.10.15 'zfs list -t volume main/iscsi | grep csi-'
# Review list, then destroy each:
# zfs destroy main/iscsi/<zvol-name>

4. Remove Vault secrets (optional)

These were used by democratic-csi SSH driver. No longer needed.

# Remove from secret/platform (used by stacks/iscsi-csi/main.tf)
vault kv patch secret/platform truenas_api_key=REMOVED truenas_ssh_private_key=REMOVED

5. Update CLAUDE.md

Remove iSCSI references from:

infra/.claude/CLAUDE.md — Storage & Backup Architecture section
AGENTS.md if any storage references

6. Commit and push

git add stacks/ebooks/main.tf docs/ .claude/
git commit -m "proxmox-csi cleanup: remove democratic-csi, delete orphaned PVCs [ci skip]"
git push

2.6 KiB Raw Blame History