back to nfs for restore

Change from nfs-csi to nvme-local-retain to avoid NFS UID constraint.
This enables restricted-v2 SCC without MyCloud NAS permissions issues.

bootstrap/n8n-application.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: n8n
+  namespace: openshift-gitops
+spec:
+  project: default
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: n8n
+  source:
+    repoURL: https://gitea.apilab.us/cscott/n8n.git
+    targetRevision: main
+    path: manifests
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      - PruneLast=true

deploy.sh

@@ -1,12 +0,0 @@
-k apply -f namespace.yaml
-k apply -f postgres-claim0-persistentvolumeclaim.yaml
-k apply -f postgres-configmap.yaml
-k apply -f postgres-secret.yaml
-k apply -f postgres-deployment.yaml
-k apply -f postgres-service.yaml
-./scc-updates.sh
-k apply -f n8n-pvc.yaml
-k apply -f n8n-service.yaml
-k apply -f n8n-deployment.yaml
-k apply -f route.yaml
-echo n8n Deployed!

manifests/deploy.sh

@@ -0,0 +1,12 @@
+oc apply -f namespace.yaml
+oc apply -f postgres-claim0-persistentvolumeclaim.yaml
+oc apply -f postgres-configmap.yaml
+oc apply -f postgres-secret.yaml
+oc apply -f postgres-deployment.yaml
+oc apply -f postgres-service.yaml
+./scc-updates.sh
+oc apply -f n8n-pvc.yaml
+oc apply -f n8n-service.yaml
+oc apply -f n8n-deployment.yaml
+oc apply -f route.yaml
+echo n8n Deployed!

manifests/n8n-deployment.yaml

@@ -52,7 +52,7 @@ spec:
                   name: postgres-secret
                   key: POSTGRES_NON_ROOT_PASSWORD
             - name: N8N_PROTOCOL
-              value: http
+              value: https
             - name: N8N_PORT
               value: "5678"
           image: docker.io/n8nio/n8n

scc-updates.sh

@@ -1,3 +0,0 @@
-oc create sa n8n-sa -n n8n
-oc adm policy add-scc-to-user anyuid -z n8n-sa -n n8n
-oc adm policy add-scc-to-user privileged -z n8n-sa -n n8n