refactor(helm): fail on removed pvc value keys

Author: onutc

docs/2026-02-05-shared-mount-syncer.md

@@ -237,12 +237,6 @@ Alternative (Kubernetes-native):
 For Spritz pods, the shared mount is writable. The syncer sidecar uses a filesystem
 watcher to publish quickly when content changes, with a periodic safety tick.
 
-## Deprecated: Shared Config PVC
-
-The shared config PVC approach is sunsetted and is **not** planned for implementation
-in the near future. Any existing PVC code should be treated as legacy and not enabled
-for new deployments. Use the object-storage syncer above.
-
 ## GCS Uniform Bucket-Level Access (Important)
 
 When using GCS buckets with Uniform Bucket-Level Access (UBLA) enabled, rclone must

helm/spritz/templates/operator-deployment.yaml

@@ -1,3 +1,9 @@
+{{- if hasKey .Values.operator "homePVC" -}}
+{{ fail "operator.homePVC has been removed; use operator.homeSizeLimit and sharedMounts instead" }}
+{{- end -}}
+{{- if hasKey .Values.operator "sharedConfigPVC" -}}
+{{ fail "operator.sharedConfigPVC has been removed; use operator.sharedMounts/api.sharedMounts instead" }}
+{{- end -}}
 apiVersion: apps/v1
 kind: Deployment
 metadata:

scripts/verify-helm.sh

@@ -87,4 +87,12 @@ expect_failure \
   "global.ingress.className must be nginx when authGateway.enabled=true" \
   helm template spritz "${chart_dir}" -f "${example_values}" --set global.ingress.className=traefik
 
+expect_failure \
+  "operator.homePVC has been removed; use operator.homeSizeLimit and sharedMounts instead" \
+  helm template spritz "${chart_dir}" --set operator.homePVC.enabled=true
+
+expect_failure \
+  "operator.sharedConfigPVC has been removed; use operator.sharedMounts/api.sharedMounts instead" \
+  helm template spritz "${chart_dir}" --set operator.sharedConfigPVC.enabled=true
+
 echo "helm checks passed"