From ad3fbc1e553c5a2becdaaa918d0935b791d9b3fb Mon Sep 17 00:00:00 2001
From: Arsolitt <arsolitt@gmail.com>
Date: Thu, 23 Apr 2026 12:42:02 +0300
Subject: [PATCH] fix(kubernetes): quote storage values and guard bind-mount
 commands

Quote diskSize and storageClassName Helm template outputs to prevent
bare numeric or special-char values from causing YAML parse errors.

Also ensure mount-point directories exist before bind-mounting and skip
the mount when the target is already a mountpoint, avoiding failures
on node reboot or re-provisioning.

Signed-off-by: Arsolitt <arsolitt@gmail.com>
---
 packages/apps/kubernetes/templates/cluster.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/packages/apps/kubernetes/templates/cluster.yaml b/packages/apps/kubernetes/templates/cluster.yaml
index 35a766739..73fc1615c 100644
--- a/packages/apps/kubernetes/templates/cluster.yaml
+++ b/packages/apps/kubernetes/templates/cluster.yaml
@@ -32,9 +32,9 @@ spec:
           storage:
             resources:
               requests:
-                storage: {{ .group.diskSize | default "20Gi" }}
+                storage: {{ .group.diskSize | default "20Gi" | quote }}
             {{- with .group.storageClass }}
-            storageClassName: {{ . }}
+            storageClassName: {{ . | quote }}
             {{- end }}
       template:
         metadata:
@@ -263,9 +263,9 @@ spec:
       - KUBELET_VERSION={{ include "kubernetes.versionMap" $}} /usr/bin/update-k8s.sh || true
       - sed -i 's|root:x:|root::|' /etc/passwd
       - systemctl stop containerd.service
-      - mkdir -p /persistent/kubelet /persistent/containerd
-      - mount -o bind /persistent/kubelet /var/lib/kubelet
-      - mount -o bind /persistent/containerd /var/lib/containerd
+      - mkdir -p /persistent/kubelet /persistent/containerd /var/lib/kubelet /var/lib/containerd
+      - mountpoint -q /var/lib/kubelet || mount -o bind /persistent/kubelet /var/lib/kubelet
+      - mountpoint -q /var/lib/containerd || mount -o bind /persistent/containerd /var/lib/containerd
       - sudo sed -i '/\[plugins."io.containerd.grpc.v1.cri".registry\]/,/^\[/ s|^\(\s*config_path\s*=\s*\).*|\1"/etc/containerd/certs.d"|' /etc/containerd/config.toml
       - systemctl start containerd.service
       joinConfiguration: