src/main/kotlin/org/domaindrivenarchitecture/provs/server/infrastructure/HetznerCSI.kt

@@ -18,7 +18,7 @@ fun Prov.provisionHetznerCSIForK8s(hetznerApiToken: Secret, encryptionPassphrase
         values = mapOf(
             "HETZNER_API_TOKEN" to hetznerApiToken.plain()
         ))
-    cmd("kubectl apply -f hcloud-api-token-secret.yaml", k3sManualManifestsDir)
+    applyHetznerCSIFileFromResource(File(k3sManualManifestsDir, "hcloud-api-token-secret.yaml"))
     applyHetznerCSIFileFromResource(File(k3sManualManifestsDir, "hcloud-csi.yaml"))
 
     // Encryption
@@ -30,7 +30,7 @@ fun Prov.provisionHetznerCSIForK8s(hetznerApiToken: Secret, encryptionPassphrase
         values = mapOf(
             "HETZNER_ENCRYPTION_PASSPHRASE" to encryptionPassphrase.plain()
         ))
-    cmd("kubectl apply -f hcloud-encryption-secret.yaml", k3sManualManifestsDir)
+    applyHetznerCSIFileFromResource(File(k3sManualManifestsDir, "hcloud-encryption-secret.yaml"))
     applyHetznerCSIFileFromResource(File(k3sManualManifestsDir, "hcloud-encrypted-storage-class.yaml"))
 }
 

src/main/kotlin/org/domaindrivenarchitecture/provs/server/infrastructure/K3s.kt

@@ -37,6 +37,8 @@ private val k3sEchoWithTls = File(k3sManualManifestsDir, "echo-tls.yaml")
 private val k3sEchoNoTls = File(k3sManualManifestsDir, "echo-no-tls.yaml")
 private val selfSignedCertificate = File(k3sManualManifestsDir, "selfsigned-certificate.yaml")
 
+private val hetznerCSIDriver = File(k3sManualManifestsDir, "hcloud-csi.yaml")
+
 private val localPathProvisionerConfig = File(k3sManualManifestsDir, "local-path-provisioner-config.yaml")
 
 // -----------------------------------  public functions  --------------------------------
@@ -123,6 +125,9 @@ fun Prov.installK3s(k3sConfig: K3sConfig): ProvResult {
             applyK3sFileFromResource(k3sMiddleWareHttpsRedirect)
         }
 
+        // hetzner csi-driver
+        applyK3sFileFromResource(hetznerCSIDriver)
+
         // other
         applyK3sFileFromResource(localPathProvisionerConfig)