diff --git a/charts/README.md b/charts/README.md index b5380f85..6de5de27 100644 --- a/charts/README.md +++ b/charts/README.md @@ -39,7 +39,7 @@ See `values.yaml` for more options. ## Notes - Ingress is off by default. Enable and configure hosts for your domain. -- PVCs require a default StorageClass or specify one as needed. +- PVCs use the cluster's default StorageClass. Set `persistence.data.storageClassName` and/or `persistence.uploads.storageClassName` to bind a specific class. - `JWT_SECRET` is managed entirely by the server — auto-generated into the data PVC on first start and rotatable via the admin panel (Settings → Danger Zone). No Helm configuration needed. - `ENCRYPTION_KEY` encrypts stored secrets (API keys, MFA, SMTP, OIDC) at rest. Recommended: set via `secretEnv.ENCRYPTION_KEY` or `existingSecret`. If left empty, the server falls back automatically: existing installs use `data/.jwt_secret` (no action needed on upgrade); fresh installs auto-generate a key persisted to the data PVC. - If using ingress, you must manually keep `env.ALLOWED_ORIGINS` and `ingress.hosts` in sync to ensure CORS works correctly. The chart does not sync these automatically. diff --git a/charts/trek/Chart.yaml b/charts/trek/Chart.yaml index 9b20dcfd..b29275f6 100644 --- a/charts/trek/Chart.yaml +++ b/charts/trek/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 name: trek -version: 3.1.1 +version: 3.1.2 description: Minimal Helm chart for TREK app -appVersion: "3.1.1" +appVersion: "3.1.2" diff --git a/charts/trek/templates/pvc.yaml b/charts/trek/templates/pvc.yaml index d68f6938..e1cd5f5c 100644 --- a/charts/trek/templates/pvc.yaml +++ b/charts/trek/templates/pvc.yaml @@ -8,6 +8,9 @@ metadata: spec: accessModes: - ReadWriteOnce + {{- with .Values.persistence.data.storageClassName }} + storageClassName: {{ . | quote }} + {{- end }} resources: requests: storage: {{ .Values.persistence.data.size }} @@ -21,6 +24,9 @@ metadata: spec: accessModes: - ReadWriteOnce + {{- with .Values.persistence.uploads.storageClassName }} + storageClassName: {{ . | quote }} + {{- end }} resources: requests: storage: {{ .Values.persistence.uploads.size }} diff --git a/charts/trek/values.yaml b/charts/trek/values.yaml index f0205423..5ee53a46 100644 --- a/charts/trek/values.yaml +++ b/charts/trek/values.yaml @@ -98,8 +98,11 @@ persistence: enabled: true data: size: 1Gi + # Leave empty to use the cluster's default StorageClass; set to bind a specific class. + storageClassName: "" uploads: size: 1Gi + storageClassName: "" resources: requests: