fix(chart): derive pvcAccessMode from hostPath mode so the single-node PVC binds (#559)

[LukasWodka]

Closes#559 (backlog cleanup epic backend#1588).

Bug

The 3 storage PVCs defaulted `pvcAccessMode` to ReadWriteMany, but in hostPath (single-node / bare-metal) mode the paired PersistentVolume is hardcoded ReadWriteOnce — so the PVC could not bind to its own PV. values.yaml already documented the intent (RWM for dynamic, RWO for hostPath); the flat default just didn't honor it, and single-node installs don't set the override.

Fix

Mode-derived default: `ternary "ReadWriteOnce" "ReadWriteMany" .Values.hostPath.enabled`. hostPath → RWO (matches the PV), dynamic/CSI → RWM (unchanged), explicit `pvcAccessMode` still wins.

Verification

• `helm template`: RWO on hostPath, RWM on dynamic, override honored, PV unchanged.
• `helm unittest`: 363 tests pass, including two new hostPath-default-RWO regression tests added here.

---

Note

Low Risk
Targeted Helm template defaulting for storage binding on bare-metal; dynamic-cluster behavior and explicit overrides are unchanged.

Overview
Fixes hostPath / bare-metal installs where logs, MySQL, and shared-images PVCs defaulted to ReadWriteMany while their paired PersistentVolumes stay ReadWriteOnce, so claims could not bind.

The chart now defaults pvcAccessMode with ternary "ReadWriteOnce" "ReadWriteMany" .Values.hostPath.enabled on those three PVC templates—RWO when hostPath.enabled is true (aligned with the PV), RWM for dynamic/CSI installs unchanged. An explicit pvcAccessMode in values still overrides.

Chart version is bumped to 1.9.29, with new helm-unittest cases asserting RWO defaults on hostPath for logs and MySQL PVCs.

^{Reviewed by Cursor Bugbot for commit 9d0b1bb. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 86b59e0. Configure here.}

[LukasWodka]

Fixed — bumped appVersion to 1.9.29 in lockstep with version (this chart has always moved the two together), so app.kubernetes.io/version won't ship stale.

[aptracebloc]

@LukasWodka — Approved (non-code-owner; @saadqbal still required — see below).

• Real single-node bug: the three storage PVCs defaulted to ReadWriteMany, but in hostPath mode their paired PV is hardcoded ReadWriteOnce, so the PVC couldn't bind. The mode-derived default pvcAccessMode | default (ternary "ReadWriteOnce" "ReadWriteMany" .Values.hostPath.enabled) is correct.
• Verified via helm template in both modes: hostPath=true → PVC ReadWriteOnce on all three (now matches the PV → binds); dynamic → ReadWriteMany (unchanged); explicit override still wins. ternary + nil-safety confirmed. helm unittest 33/33 on the two PVC suites incl. the new regression tests.
• Bugbot's "version bump omits appVersion" resolved (9d0b1bb, appVersion → 1.9.29 in lockstep); no unresolved findings.

Code-owner:/client/templates/ is owned by @saadqbal, so his approval is required to merge — my approval doesn't satisfy that gate. @saadqbal, this is the sole blocker.

⚪ Non-blocking: the new hostPath-RWO regression test was added to the logs + mysql-storage suites but not shared_images_pvc_test.yaml, though the template change applies there too (verified correct by render). Worth adding for symmetry.

🤖 Generated with Claude Code