up

Author: mitchross

BOOTSTRAP.md

@@ -198,6 +198,7 @@ ArgoCD deploys applications in a specific order to avoid race conditions and SSD
 | **0** | **1Password Connect** | Secret backend | Required by External Secrets Operator |
 | **0** | **External Secrets Operator** | Secret management CRDs | Longhorn needs ExternalSecret CRD for backup credentials |
 | **1** | **Longhorn** | Storage layer | Needs networking + secret CRDs; other apps need storage |
+| **1** | **Snapshot Controller** | Storage API | Provides VolumeSnapshot CRDs required by VolSync |
 | **1** | **Garage** | S3-compatible object storage | Needs storage layer |
 | **2** | **Infrastructure** | Core services (cert-manager, GPU operators, databases, etc.) | Depends on networking and storage being ready |
 | **3** | **Monitoring** | Prometheus, Grafana, alerts | Monitors the infrastructure |

docs/storage-architecture.md

@@ -6,6 +6,7 @@ This document outlines the storage architecture for the cluster, focusing on dat
 
 The cluster uses a layered storage approach:
 - **Longhorn**: Distributed block storage for runtime replication (2 replicas per volume)
+- **Snapshot Controller**: Manages VolumeSnapshot lifecycles and CRDs
 - **VolSync**: Daily backups of all PVCs to S3 using Restic
 - **Database-native backups**: CloudNativePG and Crunchy Postgres backup directly to S3
 
@@ -199,6 +200,7 @@ mc ls rustfs/volsync/home-assistant/
 | Component | Location |
 |-----------|----------|
 | VolSync operator | `infrastructure/storage/volsync/` |
+| Snapshot Controller | `infrastructure/storage/snapshot-controller/` |
 | Longhorn (replication only) | `infrastructure/storage/longhorn/` |
 | App VolSync configs | `my-apps/<category>/<app>/replicationsource.yaml` |
 | CNPG backup config | `infrastructure/database/cloudnative-pg/*/cluster.yaml` |

infrastructure/controllers/argocd/apps/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
   - 1passwordconnect.yaml  # Wave 0 - Secret backend (required by External Secrets)
   - external-secrets.yaml  # Wave 0 - External Secrets CRDs (required by Longhorn)
   - longhorn-app.yaml      # Wave 1 - Storage foundation
+  - snapshot-controller-app.yaml # Wave 1 - VolumeSnapshot controller + CRDs
   - volsync-app.yaml       # Wave 1 - PVC backup and replication
   # ApplicationSets for automatic discovery
   - infrastructure-appset.yaml  # Wave 2

infrastructure/controllers/argocd/apps/snapshot-controller-app.yaml

@@ -0,0 +1,35 @@
+# Snapshot Controller
+# Storage layer component - manages VolumeSnapshot CRDs and lifecycle
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: snapshot-controller
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+  labels:
+    app.kubernetes.io/part-of: infrastructure
+spec:
+  project: infrastructure
+  source:
+    repoURL: https://github.com/mitchross/talos-argocd-proxmox.git
+    targetRevision: main
+    path: infrastructure/storage/snapshot-controller
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: snapshot-controller
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+      allowEmpty: false
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true
+    - RespectIgnoreDifferences=true
+    retry:
+      limit: 10
+      backoff:
+        duration: 15s
+        factor: 2
+        maxDuration: 5m