up

Author: mitchross

infrastructure/storage/csi-driver-nfs/storage-class.yaml

@@ -42,23 +42,36 @@ mountOptions:
   - noatime
   - nconnect=4
 ---
-# Immich photos NFS storage class (read-only external library)
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
+# =============================================================================
+# Static PVs for existing NFS directories (read-only)
+# =============================================================================
+# NFS CSI dynamic provisioner creates subdirectories per PVC — won't work for
+# mounting existing data. Use static PVs instead for pre-existing NFS shares.
+
+# Immich photos - read-only mount to TrueNAS photo library
+apiVersion: v1
+kind: PersistentVolume
 metadata:
   name: nfs-immich-photos
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.10.133
-  share: /mnt/BigTank/photos/All
-reclaimPolicy: Retain
-volumeBindingMode: Immediate
-mountOptions:
-  - nfsvers=4.1
-  - nolock
-  - tcp
-  - rsize=1048576
-  - wsize=1048576
-  - noatime
-  - nconnect=4
-  - ro
+spec:
+  capacity:
+    storage: 2Ti
+  accessModes:
+    - ReadOnlyMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: ""
+  mountOptions:
+    - nfsvers=4.1
+    - nolock
+    - tcp
+    - rsize=1048576
+    - wsize=1048576
+    - noatime
+    - nconnect=4
+    - ro
+  csi:
+    driver: nfs.csi.k8s.io
+    volumeHandle: nfs-immich-photos
+    volumeAttributes:
+      server: "192.168.10.133"
+      share: "/mnt/BigTank/photos/All"

my-apps/media/immich/README.md

@@ -49,7 +49,7 @@ Originals stay on NFS read-only; only thumbnails and ML embeddings are stored lo
 
 CloudNativePG (CNPG) manages the database at `infrastructure/database/cloudnative-pg/immich/`.
 
-- Image: `ghcr.io/tensorchord/cloudnative-vectorchord:17.2-0.5.3` (Postgres 17 + VectorChord)
+- Image: `ghcr.io/tensorchord/cloudnative-vectorchord:17.5-0.4.3` (Postgres 17.5 + VectorChord 0.4.3)
 - Extensions: vchord (CASCADE installs pgvector), vector, earthdistance (CASCADE installs cube)
 - Service: `immich-database-rw.cloudnative-pg.svc.cluster.local:5432`
 - Credentials: ExternalSecret from 1Password (`immich-db-credentials` in immich ns, `immich-app-secret` in cnpg ns)
@@ -73,9 +73,12 @@ no Patroni, no leader election, just a postgres instance with backup management.
 |-----|------|--------------|--------|
 | `library` | 50Gi | longhorn | Enable after stable |
 | `immich-ml-cache` | 10Gi | longhorn | No (re-downloadable) |
-| `nfs-photos` | 2Ti | `nfs-immich-photos` (CSI, read-only) | N/A (source of truth) |
+| `nfs-photos` | 2Ti | static PV (NFS CSI, read-only) | N/A (source of truth) |
 
-## NFS StorageClass
+## NFS Static PV
 
-The `nfs-immich-photos` StorageClass is defined in `infrastructure/storage/csi-driver-nfs/storage-class.yaml`.
-It uses `nfs.csi.k8s.io` provisioner with `ro` mount option pointing to `192.168.10.133:/mnt/BigTank/photos/All`.
+The `nfs-immich-photos` PersistentVolume is defined in `infrastructure/storage/csi-driver-nfs/storage-class.yaml`.
+It uses a **static PV** (not a StorageClass) because NFS CSI dynamic provisioning creates a new subdirectory
+per PVC, which doesn't work for mounting existing data. Static PVs point directly at the existing NFS share.
+
+Mount: `192.168.10.133:/mnt/BigTank/photos/All` (read-only via `ro` mount option).

my-apps/media/immich/nfs-photos-pvc.yaml

@@ -8,8 +8,9 @@ metadata:
     app.kubernetes.io/component: external-library
 spec:
   accessModes:
-    - ReadWriteOnce
+    - ReadOnlyMany
   resources:
     requests:
       storage: 2Ti
-  storageClassName: nfs-immich-photos
+  storageClassName: ""
+  volumeName: nfs-immich-photos