From 660acfd4b3bc2f74fdbbd997aab1a733929cbb07 Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Fri, 25 Jul 2025 18:16:55 +0200
Subject: [PATCH] Add storage class for ocean pool

---
 README.md           |  8 ++++++++
 apps/authentik.yaml |  1 +
 apps/openebs.yaml   | 10 ++++++++++
 debug.yaml          | 33 ++++++++++++++++++++++++++-------
 4 files changed, 45 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index 2434e89..8241c5e 100644
--- a/README.md
+++ b/README.md
@@ -16,3 +16,11 @@ helm install argocd oci://ghcr.io/argoproj/argo-helm/argo-cd -n argocd --create-
 
 kubectl apply -f ./apps/apps.yaml
 ```
+
+## Notes
+
+zfs pool creation:
+```bash
+k -n kube-system debug -it --profile sysadmin --image=ubuntu node/kadan
+chroot /host zpool create -o ashift=12 -O mountpoint=/var/ocean -O xattr=sa -O compression=zstd -O acltype=posixacl -O atime=off ocean raidz sdc sdd
+```
diff --git a/apps/authentik.yaml b/apps/authentik.yaml
index 962cb70..a39eec2 100644
--- a/apps/authentik.yaml
+++ b/apps/authentik.yaml
@@ -29,6 +29,7 @@ spec:
           env:
             - name: AUTHENTIK_STORAGE__MEDIA__BACKEND
               value: s3
+            # TODO: configure s3
 
             - name: AUTHENTIK_POSTGRESQL__SSLMODE
               value: verify-full
diff --git a/apps/openebs.yaml b/apps/openebs.yaml
index 4c2d9db..02c8938 100644
--- a/apps/openebs.yaml
+++ b/apps/openebs.yaml
@@ -52,3 +52,13 @@ parameters:
   fstype: zfs
   poolname: tank
 provisioner: zfs.csi.openebs.io
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: openebs-zfs-ocean
+parameters:
+  compression: zstd
+  fstype: zfs
+  poolname: ocean
+provisioner: zfs.csi.openebs.io
diff --git a/debug.yaml b/debug.yaml
index 6b4d30f..12dc3af 100644
--- a/debug.yaml
+++ b/debug.yaml
@@ -72,10 +72,29 @@ spec:
         name: ubuntu
     spec:
       containers:
-        - name: ubuntu
-          image: ubuntu
-          command: 
-            - sleep
-            - infinity
-          securityContext:
-            privileged: true
+      - name: ubuntu
+        image: ubuntu
+        command: 
+        - sleep
+        - infinity
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /dev
+          name: dev
+        - mountPath: /host
+          name: host
+      volumes:
+      - name: host
+        hostPath:
+          path: /
+          type: Directory
+      - name: dev
+        hostPath:
+          path: /dev
+          type: Directory
+      tolerations:
+      - key: node.kubernetes.io/disk-pressure
+        operator: Exists
+        effect: PreferNoSchedule
+