From 7539680ae07c24764af06fea949486762be04432 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Wed, 20 May 2026 08:39:51 +0400
Subject: [PATCH] chore: switch storagesvc to S3 backend (ngcloud msk-1)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- helm/fission-values.yaml: storageType=s3, bucket=sless-functions, endPoint=https://s3.msk-1.ngcloud.ru
- helm/fission-values-pv.yaml: сохранён PV конфиг для быстрого возврата
- helm/fission-s3-secret.yaml: credentials (в .gitignore, не в репо)
- .gitignore: добавлен helm/fission-s3-secret.yaml

Возврат на PV: kubectl delete deploy executor router storagesvc -n fission
  helm upgrade fission ... -f helm/fission-values-pv.yaml --no-hooks
---
 .gitignore                  |  1 +
 helm/fission-values-pv.yaml | 30 ++++++++++++++++++++++++++++++
 helm/fission-values.yaml    | 20 ++++++++++++--------
 3 files changed, 43 insertions(+), 8 deletions(-)
 create mode 100644 helm/fission-values-pv.yaml

diff --git a/.gitignore b/.gitignore
index e9ac3e5..8054296 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,6 +19,7 @@ console/fission-console
 
 # Secrets / tokens
 token.txt
+helm/fission-s3-secret.yaml
 
 # Test logs
 test-results/
diff --git a/helm/fission-values-pv.yaml b/helm/fission-values-pv.yaml
new file mode 100644
index 0000000..50a6b6d
--- /dev/null
+++ b/helm/fission-values-pv.yaml
@@ -0,0 +1,30 @@
+# Fission helm values — PV (vcd-disk-ext4) backend
+# Применять: helm upgrade fission fission-charts/fission-all --version 1.22.1 \
+#              -n fission -f helm/fission-values-pv.yaml
+#
+# Секретов нет — local storage не требует credentials.
+# ПЕРЕД upgrade: kubectl delete deploy executor router -n fission
+
+authentication:
+  enabled: true
+
+defaultNamespace: fission-functions
+
+image: naeel/fission-bundle
+imageTag: v1.23.0
+fetcher:
+  image: naeel/fetcher
+  imageTag: v1.23.0
+
+persistence:
+  enabled: true
+  storageType: local
+  storageClass: vcd-disk-ext4
+  size: 2Gi
+  accessMode: ReadWriteOnce
+
+repository: ""
+routerServiceType: ClusterIP
+serviceType: ClusterIP
+
+analytics: false
diff --git a/helm/fission-values.yaml b/helm/fission-values.yaml
index 7a7716a..5d08bdd 100644
--- a/helm/fission-values.yaml
+++ b/helm/fission-values.yaml
@@ -1,9 +1,10 @@
-# Fission helm values — PV (local storage) backend
+# Fission helm values — S3 backend (ngcloud msk-1)
 # Применять: helm upgrade fission fission-charts/fission-all --version 1.22.1 \
-#              -n fission -f helm/fission-values.yaml
+#              -n fission -f helm/fission-values.yaml -f helm/fission-s3-secret.yaml
 #
-# Секретов нет — local storage не требует credentials.
-# При деплое в новый кластер — только этот файл.
+# Секреты — в helm/fission-s3-secret.yaml (в .gitignore, не коммитить!)
+# Вернуться на PV: -f helm/fission-values-pv.yaml (без s3-secret)
+# ПЕРЕД upgrade: kubectl delete deploy executor router -n fission
 
 authentication:
   enabled: true
@@ -18,10 +19,13 @@ fetcher:
 
 persistence:
   enabled: true
-  storageType: local
-  storageClass: vcd-disk-ext4   # сетевой block-device VMware Cloud Director (надёжнее local-path)
-  size: 2Gi
-  accessMode: ReadWriteOnce
+  storageType: s3
+  s3:
+    bucketName: sless-functions
+    subDir: fission
+    region: msk-1
+    endPoint: https://s3.msk-1.ngcloud.ru
+    # accessKeyId и secretAccessKey — в fission-s3-secret.yaml
 
 repository: ""
 routerServiceType: ClusterIP