0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-04 02:57:27 +09:00

Files

T

History

Алексей Артамонов 9dfb078cbb fix(openbao): garbage-collect the data PVC on delete (#3058 )

After deleting an OpenBAO app CR, the StatefulSet data PVC (data-<release>-0)
was left orphaned in the tenant namespace, consuming storage permanently.
StatefulSet-templated PVCs are never garbage-collected on StatefulSet deletion
by default, and the chart set no persistentVolumeClaimRetentionPolicy.

Pass a retention policy through the HelmRelease values. The vendored upstream
chart renders it onto the StatefulSet from
server.persistentVolumeClaimRetentionPolicy (not server.dataStorage.*):
whenDeleted: Delete reclaims the data PVC on release deletion, while
whenScaled: Retain keeps a member's data PVC on HA scale-down.

Also add a 'test' Makefile target so the package's helm-unittest suite runs in
CI (hack/helm-unit-tests.sh only runs packages that define a 'test' target).

Signed-off-by: Алексей Артамонов <aleksei.artamonov@aenix.io>

2026-06-25 18:24:09 +03:00

charts

feat(openbao): add application chart with standalone and HA modes

2026-02-17 20:03:01 +03:00

logos

feat(openbao): add application chart with standalone and HA modes

2026-02-17 20:03:01 +03:00

templates

fix(openbao): garbage-collect the data PVC on delete (#3058 )

2026-06-25 18:24:09 +03:00

tests

fix(openbao): garbage-collect the data PVC on delete (#3058 )

2026-06-25 18:24:09 +03:00

.helmignore

feat(openbao): add application chart with standalone and HA modes

2026-02-17 20:03:01 +03:00

Chart.yaml

chore(apps/openbao): bump app appVersion to 2.5.1

2026-06-23 03:25:27 +03:00

Makefile

fix(openbao): garbage-collect the data PVC on delete (#3058 )

2026-06-25 18:24:09 +03:00

README.md

feat(apps): mark stateful-app storageClass fields as immutable

2026-05-26 23:51:11 +03:00

values.schema.json

feat(apps): annotate schema fields with x-cozystack-options

2026-06-02 16:33:57 +03:00

values.yaml

feat(apps): declare storageClass x-cozystack-options in data app values.yaml

2026-06-02 16:33:57 +03:00

README.md

Managed OpenBAO Service

OpenBAO is an open-source secrets management solution forked from HashiCorp Vault. It provides identity-based secrets and encryption management for cloud infrastructure.

storageClass is annotated as immutable in the chart schema — see docs/storage-immutability.md for the contract and which consumers enforce it.

Parameters

Common parameters

Name	Description	Type	Value
`replicas`	Number of OpenBAO replicas. HA with Raft is automatically enabled when replicas > 1. Switching between standalone (file storage) and HA (Raft storage) modes requires data migration.	`int`	`1`
`resources`	Explicit CPU and memory configuration for each OpenBAO replica. When omitted, the preset defined in `resourcesPreset` is applied.	`object`	`{}`
`resources.cpu`	CPU available to each replica.	`quantity`	`""`
`resources.memory`	Memory (RAM) available to each replica.	`quantity`	`""`
`resourcesPreset`	Default sizing preset used when `resources` is omitted.	`string`	`t1.small`
`size`	Persistent Volume Claim size for data storage.	`quantity`	`10Gi`
`storageClass`	StorageClass used to store the data.	`string`	`""`
`external`	Enable external access from outside the cluster.	`bool`	`false`

Application-specific parameters

Name	Description	Type	Value
`ui`	Enable the OpenBAO web UI.	`bool`	`true`