From 313bdcb21a2ca77a02dde5855828ffc867c2d631 Mon Sep 17 00:00:00 2001 From: Andrew Stoltz Date: Fri, 17 Apr 2026 15:23:49 -0500 Subject: [PATCH] =?UTF-8?q?guacamole:=20NFS=20subPath=20=E2=80=94=20Synolo?= =?UTF-8?q?gy=20exports=20/volume1/kubernetes=20root=20only?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit First pass used nfs.path=/volume1/kubernetes/guacamole/recordings, which triggered "mount.nfs: access denied by server" on rke2-agent1. Synology NFS export is scoped to /volume1/kubernetes; match the working fc-desktop pattern: mount the export root and select the subdirectory via volumeMount.subPath. Co-Authored-By: Claude Opus 4.7 (1M context) --- apps/guacamole/guacamole.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/apps/guacamole/guacamole.yaml b/apps/guacamole/guacamole.yaml index b46d183..9b1eb52 100644 --- a/apps/guacamole/guacamole.yaml +++ b/apps/guacamole/guacamole.yaml @@ -201,6 +201,7 @@ spec: volumeMounts: - name: recordings mountPath: /var/lib/guacamole/recordings + subPath: guacamole/recordings - name: kubectl-proxy image: bitnami/kubectl:latest args: @@ -222,7 +223,7 @@ spec: - name: recordings nfs: server: 10.0.58.3 - path: /volume1/kubernetes/guacamole/recordings + path: /volume1/kubernetes --- apiVersion: v1 kind: Service @@ -318,6 +319,7 @@ spec: subPath: bluejay-branding-1.0.0.jar - name: recordings mountPath: /var/lib/guacamole/recordings + subPath: guacamole/recordings volumes: - name: guac-properties configMap: @@ -328,7 +330,7 @@ spec: - name: recordings nfs: server: 10.0.58.3 - path: /volume1/kubernetes/guacamole/recordings + path: /volume1/kubernetes --- apiVersion: v1 kind: Service