Install longhorn helm chart

ansible/k3s-node/tasks/prepare-host.yml

@@ -7,17 +7,17 @@
   vars:
     aur_helper_pkg: paru-bin
 
-# common
-- include_tasks: ./use-firewalld-with-iptables.yml
-
-# - name: open http and https ports in firewalld
-#   ansible.builtin.command: >
-#     sudo firewall-cmd --add-port=443/tcp --permanent \
-#       && sudo firewall-cmd --add-port=80/tcp --permanent \
-#       && sudo firewall-cmd --reload
-
 - include_tasks: ./upgrade-all-packages.yml
   vars:
     aur_helper_command: paru
 
-  # _todo: net.ipv4.ip_forward = 1
+# TODO: is per-node host-level time sync necessary?
+
+- name: install necessary utilities for longhorn
+  when: ansible_facts.os_family == 'Archlinux'
+  community.general.pacman:
+    executable: 'paru'
+    name: 
+      - nfs-utils
+      - open-iscsi
+    state: present

ansible/k3s-node/tasks/use-firewalld-with-iptables.yml

@@ -1,9 +0,0 @@
-#- name: uninstall nftables, install firewalld, configure it to use iptables, and activate it
-#  when: ansible_facts.os_family == 'Archlinux'
-#  become: true
-#  ansible.builtin.command: >
-#    pacman -Rs nftables \
-#      && pacman -Sy firewalld \
-#      && sed -i 's/FirewallBackend=.*/FirewallBackend=iptables/g' /etc/firewalld/firewalld.conf \
-#      && systemctl enable firewalld \
-#      && systemctl restart firewalld

cluster/home/longhorn-system/0namespace.yml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: longhorn-system
+  labels:
+    name: longhorn-system

cluster/home/longhorn-system/longhorn-helm.yml

@@ -0,0 +1,10 @@
+apiVersion: helm.fluxcd.io/v1
+kind: HelmRelease
+metadata:
+  name: longhorn
+  namespace: longhorn-system
+spec:
+  chart:
+    repository: https://charts.longhorn.io/longhorn
+    name: podinfo
+    version: 1.2.3