paperless: move ftp-scanner vsftpd config to hash-suffixed generator #22

2026-06-25T10:45:29Z

k.renner commented

2026-06-25 10:45:29 +00:00

Moves the static ftp-scanner-config ConfigMap out of ftp-scanner.yaml into a configMapGenerator in kustomization.yaml. Values are unchanged (PASV_ADDRESS=10.2.99.82, ports 21100-21104, scanner, uid/gid 1000).

Why

The content-hash name suffix is kept on purpose. vsftpd templates pasv_address from PASV_ADDRESS at container start, so a changed value must roll the pod. With the hash suffix, editing any value renames the generated ConfigMap -> mutates the Deployment pod template -> automatic rolling restart. Without it, an LB re-allocation would silently leave the pod advertising a stale PASV address, breaking classic-PASV clients (older Brother scanners) while EPSV clients keep working.

Validated

kubectl kustomize renders the generator as ftp-scanner-config-6d2597bt4d and rewrites the Deployment's envFrom.configMapRef.name to match — no dangling reference.
PASV_ADDRESS=10.2.99.82 matches the live ftp-scanner LoadBalancer IP.

On apply

Flux renders the new hashed CM; the Deployment rolls once to pick up the reference (identical values, so a no-op beyond the roll); the old static ftp-scanner-config CM is pruned as it's no longer in the rendered output.

🤖 Generated with Claude Code

Moves the static `ftp-scanner-config` ConfigMap out of `ftp-scanner.yaml` into a `configMapGenerator` in `kustomization.yaml`. **Values are unchanged** (`PASV_ADDRESS=10.2.99.82`, ports `21100-21104`, `scanner`, uid/gid `1000`). ## Why The content-hash name suffix is kept on purpose. vsftpd templates `pasv_address` from `PASV_ADDRESS` at container start, so a changed value must roll the pod. With the hash suffix, editing any value renames the generated ConfigMap -> mutates the Deployment pod template -> automatic rolling restart. Without it, an LB re-allocation would silently leave the pod advertising a stale PASV address, breaking classic-PASV clients (older Brother scanners) while EPSV clients keep working. ## Validated - `kubectl kustomize` renders the generator as `ftp-scanner-config-6d2597bt4d` and rewrites the Deployment's `envFrom.configMapRef.name` to match — no dangling reference. - `PASV_ADDRESS=10.2.99.82` matches the live `ftp-scanner` LoadBalancer IP. ## On apply Flux renders the new hashed CM; the Deployment rolls once to pick up the reference (identical values, so a no-op beyond the roll); the old static `ftp-scanner-config` CM is pruned as it's no longer in the rendered output. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

k.renner added 1 commit 2026-06-25 10:45:29 +00:00

paperless: move ftp-scanner vsftpd config to hash-suffixed generator e9022e0d4a

Moves the static ftp-scanner-config ConfigMap out of ftp-scanner.yaml
into a configMapGenerator in kustomization.yaml. Values are unchanged
(PASV_ADDRESS=10.2.99.82, ports 21100-21104, scanner, uid/gid 1000).

The content-hash name suffix is kept on purpose: vsftpd templates
pasv_address from PASV_ADDRESS at container start, so a changed value
must roll the pod. With the hash suffix, editing any value renames the
generated ConfigMap, mutates the Deployment pod template, and triggers
an automatic rolling restart. Without it, an IP change (e.g. an LB
re-allocation) would silently leave the pod advertising a stale PASV
address, breaking classic-PASV clients (older Brother scanners) while
EPSV clients keep working.

The Deployment consumes the CM via envFrom.configMapRef, so kustomize's
nameReference transformer rewrites the reference to the hashed name --
verified with `kubectl kustomize` (ftp-scanner-config-6d2597bt4d).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

k.renner merged commit 25024042c4 into master

2026-06-27 07:04:47 +00:00

k.renner referenced this issue from a commit

2026-06-27 07:04:48 +00:00

Merge pull request 'paperless: move ftp-scanner vsftpd config to hash-suffixed generator' (#22) from paperless-ftp-config-generator into master

hermes-bot referenced this pull request

2026-10-27 08:23:22 +00:00

[alert] KubeJobFailed (ai) #1465

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#22