Get dat Mealie and Syn

apps/base/mealie/data-migration.yaml

@@ -6,7 +6,7 @@ spec:
   containers:
     - name: migrate
       image: alpine
-      command: ["sh", "-c", "cp -av /source/. /dest/ && echo DONE Migrating!"]
+      command: ["sh", "-c", "cp -av /source/ . /dest/ && echo DONE Migrating!"]
       volumeMounts:
         - name: old-data
           mountPath: /source

apps/staging/mealie/kustomization-patch.yaml

@@ -0,0 +1,38 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base/mealie
+images: 
+  - name: ghcr.io/mealie-recipes/mealie
+    newTag: v3.16.0
+patches:
+  - target:
+      kind: PersistentVolumeClaim
+      name: mealie-syn-data
+      namespace: mealie
+    patch: |-
+      apiVersion: v1
+      kind: PersistentVolumeClaim
+      metadata:
+        name: mealie-syn-data
+      spec: 
+        storageClassName: synology-iscsi-retain
+      resources:
+        storage: 5Gi
+  - target:
+      kind: Deployment
+      name: mealie
+      namespace: mealie
+    patch: |-
+      apiVersion: v1
+      kind: Deployment
+      metadata:
+        name: mealie
+      spec:
+        replicas: 1
+        template:
+          spec:
+            volumes:
+              - name: mealie-data
+                persistentVolumeClaim:
+                  claimName: mealie-syn-data    

apps/staging/mealie/kustomization.yaml

@@ -4,4 +4,35 @@ resources:
   - ../../base/mealie
 images: 
   - name: ghcr.io/mealie-recipes/mealie
-    newTag: v3.17.0
+    newTag: v3.16.0
+patches:
+  - target:
+      kind: PersistentVolumeClaim
+      name: mealie-syn-data
+      namespace: mealie
+    patch: |-
+      apiVersion: v1
+      kind: PersistentVolumeClaim
+      metadata:
+        name: mealie-syn-data
+      spec: 
+        storageClassName: synology-iscsi-retain
+      resources:
+        storage: 5Gi
+  - target:
+      kind: Deployment
+      name: mealie
+      namespace: mealie
+    patch: |-
+      apiVersion: v1
+      kind: Deployment
+      metadata:
+        name: mealie
+      spec:
+        replicas: 1
+        template:
+          spec:
+            volumes:
+              - name: mealie-data
+                persistentVolumeClaim:
+                  claimName: mealie-syn-data    

infrastructure/controllers/base/synology-csi/client-info-secret.yaml

@@ -3,9 +3,6 @@ data:
   client-info.yaml: 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
 kind: Secret
 metadata:
-  creationTimestamp: "2026-05-04T22:30:05Z"
   name: client-info-secret
   namespace: synology-csi
-  resourceVersion: "2303696"
-  uid: 24aa7bf1-0702-493f-8bb6-777d01b7981a
 type: Opaque

infrastructure/controllers/base/synology-csi/kustomization.yaml

@@ -1,10 +1,16 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - csi-driver.yaml
-  - node.yaml
-  - controller.yaml
+  - synology-csi-driver.yaml
+  - synology-csi-node.yaml
+  - synology-csi-controller.yaml
+  - synology-csi-snapshotter.yaml
   - client-info-secret.yaml
   - storage-class-retain.yaml
-  #- storage-class-smb.yaml
-  #- storage-class.yaml
+  - synology-csi-controller-role.yaml
+  - synology-csi-controller-rolebind.yaml
+  - synology-csi-node-role.yaml
+  - synology-csi-node-rolebind.yaml
+  - synology-csi-sa.yaml
+  - synology-csi-snapshotter-role.yaml
+  - synology-csi-snapshotter-rolebind.yaml

infrastructure/controllers/base/synology-csi/synology-csi-controller-role.yaml

@@ -0,0 +1,122 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations:
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"name":"synology-csi-controller-role"},"rules":[{"apiGroups":[""],"resources":["events"],"verbs":["get","list","watch","create","update","patch"]},{"apiGroups":[""],"resources":["persistentvolumeclaims"],"verbs":["get","list","watch","update","patch"]},{"apiGroups":[""],"resources":["persistentvolumeclaims/status"],"verbs":["get","list","watch","update","patch"]},{"apiGroups":[""],"resources":["persistentvolumes"],"verbs":["get","list","watch","create","update","patch","delete"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["get","list","watch"]},{"apiGroups":[""],"resources":["pods"],"verbs":["get","list","watch"]},{"apiGroups":["storage.k8s.io"],"resources":["csinodes"],"verbs":["get","list","watch"]},{"apiGroups":["csi.storage.k8s.io"],"resources":["csinodeinfos"],"verbs":["get","list","watch"]},{"apiGroups":["storage.k8s.io"],"resources":["volumeattachments","volumeattachments/status"],"verbs":["get","list","watch","update","patch"]},{"apiGroups":["storage.k8s.io"],"resources":["storageclasses"],"verbs":["get","list","watch"]},{"apiGroups":["snapshot.storage.k8s.io"],"resources":["volumesnapshots"],"verbs":["get","list"]},{"apiGroups":["snapshot.storage.k8s.io"],"resources":["volumesnapshotcontents"],"verbs":["get","list"]},{"apiGroups":[""],"resources":["secrets"],"verbs":["get"]}]}
+  name: synology-csi-controller-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+- apiGroups:
+  - ""
+  resources:
+  - persistentvolumeclaims
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
+- apiGroups:
+  - ""
+  resources:
+  - persistentvolumeclaims/status
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
+- apiGroups:
+  - ""
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - csinodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - csi.storage.k8s.io
+  resources:
+  - csinodeinfos
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments
+  - volumeattachments/status
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshots
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshotcontents
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get

infrastructure/controllers/base/synology-csi/synology-csi-controller-rolebind.yaml

@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  annotations:
+    kubectl.kubernetes.io/last-applied-configuration: |
+      {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRoleBinding","metadata":{"annotations":{},"name":"synology-csi-controller-role"},"roleRef":{"apiGroup":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"synology-csi-controller-role"},"subjects":[{"kind":"ServiceAccount","name":"csi-controller-sa","namespace":"synology-csi"}]}
+  name: synology-csi-controller-role
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: synology-csi-controller-role
+subjects:
+- kind: ServiceAccount
+  name: csi-controller-sa
+  namespace: synology-csi