Chart: postgresql.existingClaim for a database volume made outside the chart

README.md

@@ -57,7 +57,7 @@ helm install sync charts/archify-sync -n archify-sync --create-namespace \
   --set database.existingSecret=archify-sync-db   # a Secret with the URL under "url"
 ```
 
-`postgresql.enabled=true` adds a single PostgreSQL to the release, for trying out. Behind ingress-nginx, raise `proxy-read-timeout` and `proxy-send-timeout` (see `values.yaml`): edits travel over a WebSocket that stays open.
+`postgresql.enabled=true` adds a single PostgreSQL to the release, for trying out. `postgresql.existingClaim` puts its data on a claim made outside the chart; PostgreSQL runs as uid 70 and needs that directory owned by 70, mode 0700, so an NFS share must not map every user to root. Behind ingress-nginx, raise `proxy-read-timeout` and `proxy-send-timeout` (see `values.yaml`): edits travel over a WebSocket that stays open.
 
 On a local cluster (OrbStack, kind, k3d) with the image from `docker build -t archify-sync:local .`:
 

charts/archify-sync/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: archify-sync
 description: Archify Sync, live and shared Archify models for VS Code
 type: application
-version: 0.1.0
+version: 0.1.1
 appVersion: "0.1.0"
 annotations:
   artifacthub.io/license: MIT

charts/archify-sync/templates/postgresql.yaml

@@ -97,6 +97,12 @@ spec:
       volumes:
         - name: run
           emptyDir: {}
+        {{- with .Values.postgresql.existingClaim }}
+        - name: data
+          persistentVolumeClaim:
+            claimName: {{ . }}
+        {{- end }}
+  {{- if not .Values.postgresql.existingClaim }}
   volumeClaimTemplates:
     - metadata:
         name: data
@@ -109,3 +115,4 @@ spec:
           requests:
             storage: {{ .Values.postgresql.storage }}
   {{- end }}
+{{- end }}

charts/archify-sync/values.yaml

@@ -31,6 +31,9 @@ postgresql:
   existingSecret: ""
   storage: 5Gi
   storageClass: ""
+  # A PersistentVolumeClaim made outside the chart (e.g. a static NFS volume whose
+  # directory is owned by uid 70, mode 0700); storage and storageClass are then unused.
+  existingClaim: ""
   resources: {}
 
 config: