feat(lago): add GCS support and stop provisioning the local PVC for it

The chart had no GCS awareness, and the bundled local-storage PVC was
gated only on S3 and MinIO. For anyone running Lago against Google Cloud
Storage that gate is always true, so the chart provisions one
ReadWriteOnce PVC and mounts it at /app/storage into api, worker,
billing-worker, payment-worker, pdf-worker and clock-worker.

A single RWO disk attaches to one node, so all six pods must co-locate.
That holds by luck on first install and then any rollout that schedules a
pod onto another node deadlocks with Multi-Attach errors, on a volume
that is never read or written while object storage is active.

Add a global.gcs block mirroring global.s3, a gcsEnvs helper following
the existing kafkaEnvs/clickhouseEnvs pattern, and a localStorage helper
that answers "is the bundled PVC needed?" in one place instead of an
inline condition repeated across 13 sites. Wire gcsEnvs into the same six
deployments that already carry the S3 env block.

Rendered output is unchanged for anyone who has not set
global.gcs.enabled, verified with a before/after helm template diff
across the default, s3, minio, clickhouse and existingSecret value sets.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: LudvigHz

charts/lago/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: "1.32.4"
 description: the Lago open source billing app
 name: lago
-version: 1.28.0
+version: 1.29.0
 dependencies:
   - name: minio
     version: "5.2.0"

charts/lago/templates/_helpers.tpl

@@ -85,3 +85,34 @@
       key: clickhousePassword
       optional: true
 {{- end }}
+
+{{- define "gcsEnvs" }}
+{{- $gcs := .Values.global.gcs -}}
+- name: LAGO_USE_GCS
+  value: "true"
+- name: LAGO_GCS_PROJECT
+  value: {{ required "If gcs is enabled, you must provide global.gcs.project" $gcs.project | quote }}
+- name: LAGO_GCS_BUCKET
+  value: {{ required "If gcs is enabled, you must provide global.gcs.bucket" $gcs.bucket | quote }}
+{{- if $gcs.iam }}
+- name: LAGO_GCS_IAM
+  value: "true"
+- name: LAGO_GCS_GSA_EMAIL
+  value: {{ required "If gcs iam is enabled, you must provide global.gcs.gsaEmail" $gcs.gsaEmail | quote }}
+{{- end }}
+{{- with $gcs.keyfileJsonPath }}
+- name: LAGO_GCS_KEYFILE_JSON_PATH
+  value: {{ . | quote }}
+{{- end }}
+{{- end }}
+
+{{/*
+Renders "true" when no object storage backend is configured, meaning the chart
+has to provision and mount its bundled local-storage PersistentVolumeClaim.
+Empty (falsy) otherwise, so it can be used as {{ if include "localStorage" . }}.
+*/}}
+{{- define "localStorage" -}}
+{{- if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) (not .Values.global.gcs.enabled) -}}
+true
+{{- end -}}
+{{- end }}

charts/lago/templates/api-deployment.yaml

@@ -200,6 +200,9 @@ spec:
                         {{ default "us-east-1" .Values.minio.region | quote }}
                       {{ end }}
           {{ end }}
+            {{- if .Values.global.gcs.enabled }}
+            {{- include "gcsEnvs" . | nindent 12 }}
+            {{- end }}
             {{ if .Values.global.smtp.enabled }}
             - name: LAGO_FROM_EMAIL
               value: {{ .Values.global.smtp.fromEmail }}
@@ -265,13 +268,13 @@ spec:
           resources:
             {{- toYaml . | nindent 12}}
           {{- end }}
-          {{- if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+          {{- if include "localStorage" . }}
           volumeMounts:
             - mountPath: /app/storage
               name: {{ .Release.Name }}-storage-data
           {{ end }}
       restartPolicy: Always
-      {{- if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+      {{- if include "localStorage" . }}
       volumes:
         - name: {{ .Release.Name }}-storage-data
           persistentVolumeClaim:

charts/lago/templates/billing-worker-deployment.yaml

@@ -182,6 +182,9 @@ spec:
                         {{ default "us-east-1" .Values.minio.region | quote }}
                       {{ end }}
             {{ end }}
+            {{- if .Values.global.gcs.enabled }}
+            {{- include "gcsEnvs" . | nindent 12 }}
+            {{- end }}
 
             {{ if .Values.global.smtp.enabled }}
             - name: LAGO_FROM_EMAIL
@@ -224,13 +227,13 @@ spec:
           resources:
             {{- toYaml . | nindent 12}}
           {{- end }}
-          {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+          {{ if include "localStorage" . }}
           volumeMounts:
             - mountPath: /app/storage
               name: {{ .Release.Name }}-storage-data
           {{ end }}
       restartPolicy: Always
-      {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+      {{ if include "localStorage" . }}
       volumes:
         - name: {{ .Release.Name }}-storage-data
           persistentVolumeClaim:

charts/lago/templates/clock-worker-deployment.yaml

@@ -182,6 +182,9 @@ spec:
                         {{ default "us-east-1" .Values.minio.region | quote }}
                       {{ end }}
             {{ end }}
+            {{- if .Values.global.gcs.enabled }}
+            {{- include "gcsEnvs" . | nindent 12 }}
+            {{- end }}
 
             {{ if .Values.global.newRelic.enabled }}
             - name: NEW_RELIC_KEY
@@ -206,13 +209,13 @@ spec:
           resources:
             {{- toYaml . | nindent 12}}
           {{- end }}
-          {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+          {{ if include "localStorage" . }}
           volumeMounts:
             - mountPath: /app/storage
               name: {{ .Release.Name }}-storage-data
           {{ end }}
       restartPolicy: Always
-      {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+      {{ if include "localStorage" . }}
       volumes:
         - name: {{ .Release.Name }}-storage-data
           persistentVolumeClaim:

charts/lago/templates/payment-worker-deployment.yaml

@@ -182,6 +182,9 @@ spec:
                         {{ default "us-east-1" .Values.minio.region | quote }}
                       {{ end }}
             {{ end }}
+            {{- if .Values.global.gcs.enabled }}
+            {{- include "gcsEnvs" . | nindent 12 }}
+            {{- end }}
 
             {{ if .Values.global.smtp.enabled }}
             - name: LAGO_FROM_EMAIL
@@ -224,13 +227,13 @@ spec:
           resources:
             {{- toYaml . | nindent 12}}
           {{- end }}
-          {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+          {{ if include "localStorage" . }}
           volumeMounts:
             - mountPath: /app/storage
               name: {{ .Release.Name }}-storage-data
           {{ end }}
       restartPolicy: Always
-      {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+      {{ if include "localStorage" . }}
       volumes:
         - name: {{ .Release.Name }}-storage-data
           persistentVolumeClaim:

charts/lago/templates/pdf-worker-deployment.yaml

@@ -182,6 +182,9 @@ spec:
                         {{ default "us-east-1" .Values.minio.region | quote }}
                       {{ end }}
             {{ end }}
+            {{- if .Values.global.gcs.enabled }}
+            {{- include "gcsEnvs" . | nindent 12 }}
+            {{- end }}
 
             {{ if .Values.global.smtp.enabled }}
             - name: LAGO_FROM_EMAIL
@@ -224,13 +227,13 @@ spec:
           resources:
             {{- toYaml . | nindent 12}}
           {{- end }}
-          {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+          {{ if include "localStorage" . }}
           volumeMounts:
             - mountPath: /app/storage
               name: {{ .Release.Name }}-storage-data
           {{ end }}
       restartPolicy: Always
-      {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+      {{ if include "localStorage" . }}
       volumes:
         - name: {{ .Release.Name }}-storage-data
           persistentVolumeClaim:

charts/lago/templates/storage-data-persistentvolumeclaim.yaml

@@ -1,4 +1,4 @@
-{{- if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) -}}
+{{- if include "localStorage" . -}}
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:

charts/lago/templates/worker-deployment.yaml

@@ -181,6 +181,9 @@ spec:
                         {{ default "us-east-1" .Values.minio.region | quote }}
                       {{ end }}
             {{ end }}
+            {{- if .Values.global.gcs.enabled }}
+            {{- include "gcsEnvs" . | nindent 12 }}
+            {{- end }}
 
             {{ if .Values.global.smtp.enabled }}
             - name: LAGO_FROM_EMAIL
@@ -223,13 +226,13 @@ spec:
           resources:
             {{- toYaml . | nindent 12}}
           {{- end }}
-          {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+          {{ if include "localStorage" . }}
           volumeMounts:
             - mountPath: /app/storage
               name: {{ .Release.Name }}-storage-data
           {{ end }}
       restartPolicy: Always
-      {{ if and (not .Values.global.s3.enabled) (not .Values.minio.enabled) }}
+      {{ if include "localStorage" . }}
       volumes:
         - name: {{ .Release.Name }}-storage-data
           persistentVolumeClaim: