apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: nfs-subdir-external-provisioner
  namespace: nfs-subdir-external-provisioner
spec:
  chart:
    spec:
      chart: nfs-subdir-external-provisioner
      version: 4.x.x
      sourceRef:
        kind: HelmRepository
        name: nfs-subdir-external-provisioner
  interval: 15m
  timeout: 5m
  releaseName: nfs-subdir-external-provisioner
  values:
    replicaCount: 1
    strategyType: Recreate

    image:
      repository: registry.k8s.io/sig-storage/nfs-subdir-external-provisioner
      tag: v4.0.2
      pullPolicy: IfNotPresent
    imagePullSecrets: []

    nfs:
      server: 192.168.2.50
      path: /volume1/k8sdata
      mountOptions:
      volumeName: nfs-subdir-external-provisioner-root
      # Reclaim policy for the main nfs volume
      reclaimPolicy: Retain

    # For creating the StorageClass automatically:
    storageClass:
      create: true

      # Set a provisioner name. If unset, a name will be generated.
      # provisionerName:

      # Set StorageClass as the default StorageClass
      # Ignored if storageClass.create is false
      defaultClass: false

      # Set a StorageClass name
      # Ignored if storageClass.create is false
      name: nfs-client

      # Allow volume to be expanded dynamically
      allowVolumeExpansion: true

      # Method used to reclaim an obsoleted volume
      reclaimPolicy: Delete

      # When set to false your PVs will not be archived by the provisioner upon deletion of the PVC.
      archiveOnDelete: true

      # If it exists and has 'delete' value, delete the directory. If it exists and has 'retain' value, save the directory.
      # Overrides archiveOnDelete.
      # Ignored if value not set.
      onDelete:

      # Specifies a template for creating a directory path via PVC metadata's such as labels, annotations, name or namespace.
      # Ignored if value not set.
      pathPattern: "${.PVC.namespace}-${.PVC.name}"

      # Set access mode - ReadWriteOnce, ReadOnlyMany or ReadWriteMany
      accessModes: ReadWriteOnce

      # Set volume bindinng mode - Immediate or WaitForFirstConsumer
      volumeBindingMode: Immediate

      # Storage class annotations
      annotations: {}

    leaderElection:
      # When set to false leader election will be disabled
      enabled: true

    ## For RBAC support:
    rbac:
      # Specifies whether RBAC resources should be created
      create: true

    # If true, create & use Pod Security Policy resources
    # https://kubernetes.io/docs/concepts/policy/pod-security-policy/
    podSecurityPolicy:
      enabled: false

    # Deployment pod annotations
    podAnnotations: {}

    ## Set pod priorityClassName
    # priorityClassName: ""

    podSecurityContext: {}

    securityContext: {}

    serviceAccount:
      # Specifies whether a ServiceAccount should be created
      create: true

      # Annotations to add to the service account
      annotations: {}

      # The name of the ServiceAccount to use.
      # If not set and create is true, a name is generated using the fullname template
      name:

    resources: {}
      # limits:
      #  cpu: 100m
      #  memory: 128Mi
      # requests:
      #  cpu: 100m
      #  memory: 128Mi

    nodeSelector: {}

    tolerations: []

    affinity: {}

    # Additional labels for any resource created
    labels: {}

    podDisruptionBudget:
      enabled: false
      maxUnavailable: 1