feat: Who prod deploy

roles/ckan/templates/kubernetes/aks/ckan_volumes.yaml

@@ -1,12 +1,22 @@
 ---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:  
+  name: azureblob-nfs-premium
+provisioner: file.csi.azure.com
+volumeBindingMode: Immediate
+allowVolumeExpansion: true
+mountOptions:
+  - uid=900
+  - gid=900
+
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   labels:
     app: ckan
-  name: ckan-resources-blob
+  name: ckan-resources
 spec:
-  persistentVolumeReclaimPolicy: Retain
   accessModes:
   - ReadWriteMany
   storageClassName: azureblob-nfs-premium
@@ -20,9 +30,8 @@ kind: PersistentVolumeClaim
 metadata:
   labels:
     app: ckan
-  name: ckan-webassets-blob
+  name: ckan-webassets
 spec:
-  persistentVolumeReclaimPolicy: Retain
   accessModes:
   - ReadWriteMany
   storageClassName: azureblob-nfs-premium
@@ -36,12 +45,11 @@ kind: PersistentVolumeClaim
 metadata:
   labels:
     app: ckan
-  name: ckan-storage-blob
+  name: ckan-storage
 spec:
-  persistentVolumeReclaimPolicy: Retain
   accessModes:
   - ReadWriteMany
   storageClassName: azureblob-nfs-premium
   resources:
     requests:
-      storage: 1Gi
+      storage: 1Gi

roles/ckan/templates/kubernetes/ckandb_job.yaml

@@ -26,7 +26,7 @@ spec:
               value: "{{ rds_admin_username }}"
             - name: POSTGRES_PASSWORD
               value: "{{ ckan_postgres_password }}"
- 
+
           name: ckan-db-init
           image: postgres:13
           command: ['bash', '-c']

roles/setup-aks/tasks/main.yml

@@ -65,6 +65,12 @@
     --name {{resource_prefix}}-aks \
     --resource-group {{ resource_group_name }} \
 
+- name: Allow AKS to access ACR
+  command: >
+    az aks update --attach-acr {{acr_name}} \
+    --name {{resource_prefix}}-aks \
+    --resource-group {{ resource_group_name }}
+
 # TODO: (Maybe) Remove public control plane network with CLI
 - name: Create a storage account for the data lake
   azure_rm_storageaccount: