back to nfs for restore

Change from nfs-csi to nvme-local-retain to avoid NFS UID constraint.
This enables restricted-v2 SCC without MyCloud NAS permissions issues.

@

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  labels:
-    service: n8n-claim0
-  name: n8n-claim0
-  namespace: n8n
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi

bootstrap/n8n-application.yaml

@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: n8n
+  namespace: openshift-gitops
+spec:
+  project: default
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: n8n
+  source:
+    repoURL: https://gitea.apilab.us/cscott/n8n.git
+    targetRevision: main
+    path: manifests
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      - PruneLast=true

deploy.sh

@@ -1,13 +0,0 @@
-k apply -f namespace.yaml
-k apply -f postgres-claim0-persistentvolumeclaim.yaml
-k apply -f postgres-configmap.yaml
-k apply -f postgres-secret.yaml
-k apply -f postgres-deployment.yaml
-k apply -f postgres-service.yaml
-./scc-updates.sh
-k apply -f n8n-pvc.yaml
-k apply -f n8n-pv.yaml
-k apply -f n8n-service.yaml
-k apply -f n8n-deployment.yaml
-k apply -f route.yaml
-echo n8n Deployed!

manifests/deploy.sh

@@ -0,0 +1,12 @@
+oc apply -f namespace.yaml
+oc apply -f postgres-claim0-persistentvolumeclaim.yaml
+oc apply -f postgres-configmap.yaml
+oc apply -f postgres-secret.yaml
+oc apply -f postgres-deployment.yaml
+oc apply -f postgres-service.yaml
+./scc-updates.sh
+oc apply -f n8n-pvc.yaml
+oc apply -f n8n-service.yaml
+oc apply -f n8n-deployment.yaml
+oc apply -f route.yaml
+echo n8n Deployed!

manifests/n8n-deployment.yaml

@@ -52,7 +52,7 @@ spec:
                   name: postgres-secret
                   key: POSTGRES_NON_ROOT_PASSWORD
             - name: N8N_PROTOCOL
-              value: http
+              value: https
             - name: N8N_PORT
               value: "5678"
           image: docker.io/n8nio/n8n

manifests/n8n-pvc.yaml

@@ -9,5 +9,4 @@ spec:
   resources:
     requests:
       storage: 4Gi
-  storageClassName: nfs
-  volumeName: n8n
+  storageClassName: nfs-csi

n8n-pv.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: n8n
-  namespace: n8n
-spec:
-  capacity:
-    storage: 4Gi
-  nfs:
-    server: 192.168.0.105
-    path: /nfs/NFS/ocp/n8n
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs

scc-updates.sh

@@ -1,3 +0,0 @@
-oc create sa n8n-sa -n n8n
-oc adm policy add-scc-to-user anyuid -z n8n-sa -n n8n
-oc adm policy add-scc-to-user privileged -z n8n-sa -n n8n