apps(znc): Moved storage to s3yuyuko

apps/znc/pvc.yaml

@@ -1,11 +1,43 @@
 apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: znc-pv
+spec:
+  storageClassName: s3yuyuko
+  capacity:
+    storage: 5G
+  accessModes:
+    - ReadWriteOnce
+  claimRef:
+    namespace: default
+    name: znc-yuyuko-pvc
+  csi:
+    driver: ru.yandex.s3.csi
+    controllerPublishSecretRef:
+      name: csi-yuyuko-secret
+      namespace: kube-system
+    nodePublishSecretRef:
+      name: csi-yuyuko-secret
+      namespace: kube-system
+    nodeStageSecretRef:
+      name: csi-yuyuko-secret
+      namespace: kube-system
+    volumeAttributes:
+      capacity: 5G
+      mounter: s3fs-fuse
+      options: --memory-limit 1000 --dir-mode 0777 --file-mode 0666 -o allow_other --uid 1000 --gid 1000
+    volumeHandle: znc-pv
+---
+apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: znc-pvc
+  name: znc-yuyuko-pvc
 spec:
   accessModes:
     - ReadWriteOnce
-  storageClassName: longhorn
+  storageClassName: s3yuyuko
   resources:
     requests:
-      storage: 2Gi
+      storage: 5G
+  volumeMode: Filesystem
+  volumeName: znc-pv

apps/znc/statefulset.yaml

@@ -18,7 +18,7 @@ spec:
       volumes:
         - name: znc-config
           persistentVolumeClaim:
-            claimName: znc-pvc
+            claimName: znc-yuyuko-pvc
       containers:
         - name: znc
           image: znc:1.9.1
@@ -27,4 +27,14 @@ spec:
             - containerPort: 4921
           volumeMounts:
           - name: znc-config
-            mountPath: "/znc-data"
+            mountPath: "/znc-data"
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            seccompProfile:
+              type: RuntimeDefault