adding nfs to amd64 cluster

components/storage/controllers/dev-amd64/kustomization.yaml

@@ -1,3 +1,12 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-resources: []
+resources: 
+  - ../base
+  - ../base/nfs
+secretGenerator:
+  - name: nfs-provisioner-config
+    namespace: storage
+    files:
+      - values.yaml=./nfs/nfs-config.yaml
+generatorOptions:
+  disableNameSuffixHash: false

components/storage/controllers/dev-amd64/nfs/.sops.yaml

@@ -0,0 +1,5 @@
+creation_rules:
+  - path_regex: nfs-config.yaml$
+    encrypted_regex: "^(nfs)$"
+    age: 
+      - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq

components/storage/controllers/dev-amd64/nfs/nfs-config.yaml

@@ -0,0 +1,18 @@
+nfs:
+    path: ENC[AES256_GCM,data:/S0Ftz6vCdks3/F+rWuXUZDvFiTLRK1TmyFENAHbeA==,iv:meEuItTApBJkySX5kF+huTn/4Xq5Z7XyW23WWysXoKY=,tag:o1tMrcOQQVIahDzHiWcp0A==,type:str]
+    server: ENC[AES256_GCM,data:p7TOX8WZ6hBPaKw=,iv:BlcJgNSs+O5hg98pyF6xKql5/NzzYfxK2dIF0PkUItk=,tag:Vk9zzf68+1OWSm0XYngBDQ==,type:str]
+sops:
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3aklEYXg4VTFLb2xMaC9Y
+            MFRXdzR3b3ErNW9XWjF3azM0QnBVVjRJQkJBCmFsMC9DSnZoZDFWQ0JCd1ZyVDVH
+            UVFCMStSYzNiOGl5NjAyb0s5Y000cDgKLS0tIGFSRDRxcFVTdGFOOW95SXNmUDVH
+            bnRJbEVQa3JhdGx2Qk4xUHlSWGVwREEKCjmPc7nlKLdp0EDYPm6N7ICqf+Cg7Ymx
+            Y20aAzqMdBIucNhMxUFeh4XJVwZTi4JcP2Aylhn2LLb1wz6JZiGpMg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-06T15:24:24Z"
+    mac: ENC[AES256_GCM,data:8U6W37XVWjTfYdHVVk6Xd7XxKUIgsCyWBNmM5r4ICA/a4nYFP6P8IfAgT9WysrTWHQHdfHqAx8pYp4kpJ6RS25t4WVj8/828FeguyjaJNJnBpxJYy0piAFGKwghwD5Ba11L0znaaA4FY7/2nEeWQZEaJmX0RG2UIxC25ZIGV2Fk=,iv:TTJXiJkmUW7ddbv8lUUljDALG6nuwBayavDo76myVlI=,tag:lTg1yaQa6VbV5pq6E9CB+w==,type:str]
+    encrypted_regex: ^(nfs)$
+    version: 3.11.0