From 24c0cfcdbd92d34f4176acf037e9967c1a1b22f1 Mon Sep 17 00:00:00 2001
From: Sebastian Bernauer <sebastian.bernauer@stackable.tech>
Date: Wed, 7 Jan 2026 08:58:28 +0100
Subject: [PATCH] chore: Switch secret-operator volume to ephemeral

---
 .../authentication/04-install-keycloak.yaml.j2 | 18 +++++++++++++-----
 .../05-install-test-trino.yaml.j2              | 18 +++++++++++++-----
 .../install-openldap-other.yaml.j2             | 18 +++++++++++++-----
 .../authentication/install-openldap.yaml.j2    | 18 +++++++++++++-----
 4 files changed, 52 insertions(+), 20 deletions(-)

diff --git a/tests/templates/kuttl/authentication/04-install-keycloak.yaml.j2 b/tests/templates/kuttl/authentication/04-install-keycloak.yaml.j2
index 02907f49..a4a913c4 100644
--- a/tests/templates/kuttl/authentication/04-install-keycloak.yaml.j2
+++ b/tests/templates/kuttl/authentication/04-install-keycloak.yaml.j2
@@ -47,11 +47,19 @@ spec:
           configMap:
             name: keycloak-realms
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: tls
-              secrets.stackable.tech/scope: service=keycloak
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: tls
+                  secrets.stackable.tech/scope: service=keycloak
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
 ---
 apiVersion: v1
 kind: Service
diff --git a/tests/templates/kuttl/authentication/05-install-test-trino.yaml.j2 b/tests/templates/kuttl/authentication/05-install-test-trino.yaml.j2
index d8fba82c..195c3e8d 100644
--- a/tests/templates/kuttl/authentication/05-install-test-trino.yaml.j2
+++ b/tests/templates/kuttl/authentication/05-install-test-trino.yaml.j2
@@ -32,8 +32,16 @@ spec:
               value: /stackable/tls/ca.crt
       volumes:
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: tls
-              secrets.stackable.tech/scope: pod,node
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: tls
+                  secrets.stackable.tech/scope: pod,node
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
diff --git a/tests/templates/kuttl/authentication/install-openldap-other.yaml.j2 b/tests/templates/kuttl/authentication/install-openldap-other.yaml.j2
index bea9ccfd..b11db017 100644
--- a/tests/templates/kuttl/authentication/install-openldap-other.yaml.j2
+++ b/tests/templates/kuttl/authentication/install-openldap-other.yaml.j2
@@ -70,11 +70,19 @@ spec:
              - NET_BIND_SERVICE
       volumes:
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: openldap-other-tls-$NAMESPACE
-              secrets.stackable.tech/scope: pod
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: openldap-other-tls-$NAMESPACE
+                  secrets.stackable.tech/scope: pod
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
 ---
 apiVersion: v1
 kind: Service
diff --git a/tests/templates/kuttl/authentication/install-openldap.yaml.j2 b/tests/templates/kuttl/authentication/install-openldap.yaml.j2
index 140b868a..78bfcfee 100644
--- a/tests/templates/kuttl/authentication/install-openldap.yaml.j2
+++ b/tests/templates/kuttl/authentication/install-openldap.yaml.j2
@@ -70,11 +70,19 @@ spec:
               - NET_BIND_SERVICE
       volumes:
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: openldap-tls-$NAMESPACE
-              secrets.stackable.tech/scope: pod
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: openldap-tls-$NAMESPACE
+                  secrets.stackable.tech/scope: pod
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
 ---
 apiVersion: v1
 kind: Service