Migrate vault PVCs to longhorn

data-restorer.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: data-restorer
+  namespace: vault
+spec:
+  containers:
+  - name: alpine
+    image: alpine:latest
+    command: ["sleep", "infinity"]
+    volumeMounts:
+    - mountPath: /restore
+      name: target-volume
+  volumes:
+  - name: target-volume
+    persistentVolumeClaim:
+      claimName: keykeeper-data-pvc

services/vault/keykeeper/keykeeper-deployment.yaml

@@ -14,8 +14,6 @@ spec:
         app: vault-keykeeper
     spec:
       serviceAccountName: vault # Allows k8s auth for autounsealing
-      nodeSelector:
-        app: keykeeper # Should be Robin/some non-server node with a /keykeeper local dir chowned by 100:100
       containers:
       - name: vault
         image: hashicorp/vault:latest
@@ -57,6 +55,21 @@ spec:
           mountPath: /vault/file
       volumes:
       - name: vault-data
-        hostPath:
+        persistentVolumeClaim:
-          path: /keykeeper
+          claimName: keykeeper-data-pvc
-          type: DirectoryOrCreate
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: keykeeper-data-pvc
+  namespace: vault
+  labels:
+    recurring-job.longhorn.io/source: "enabled"
+    recurring-job-group.longhorn.io/app-config-group: "enabled"
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 1Gi

services/vault/vault-statefulset.yaml

@@ -140,6 +140,7 @@ spec:
       name: data
     spec:
       accessModes: [ "ReadWriteOnce" ]
+      storageClassName: longhorn
       resources:
         requests:
-          storage: 10Gi
+          storage: 1Gi