feat:Fix the bootstrap to be deploy key application

k8s/infrastructure/longhorn/kustomization.yaml

@@ -3,6 +3,7 @@ kind: Kustomization
 namespace: longhorn-system
 resources:
   - longhorn-storageclass.yaml
+  - longhorn-cnpg-storageclass.yaml  # CNPG-specific with postgres UID/GID
   - longhorn-servicemonitor.yaml
   - longhorn-taint-toleration.yaml
   - longhorn-nodes.yaml

k8s/infrastructure/longhorn/longhorn-cnpg-storageclass.yaml

@@ -0,0 +1,26 @@
+# StorageClass specifically for CNPG (CloudNativePG) PostgreSQL clusters
+# Fixes the "read-only filesystem" issue by mounting with postgres UID/GID
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: longhorn-cnpg
+  namespace: longhorn-system
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "false"
+provisioner: driver.longhorn.io
+allowVolumeExpansion: true
+parameters:
+  numberOfReplicas: "3"
+  staleReplicaTimeout: "30"
+  fromBackup: ""
+  dataLocality: "best-effort"
+  fsType: "ext4"
+  # Mount options to ensure PostgreSQL can write
+  mkfsParams: "-O ^64bit,^metadata_csum"
+mountOptions:
+  - "noatime"
+  # Critical: mount with postgres UID/GID (26:26) to avoid permission issues
+  - "uid=26"
+  - "gid=26"
+reclaimPolicy: Delete
+volumeBindingMode: Immediate