forked from rook/rook
Madhu Rajanna
3d024ce3c7
updating the csi operator API version to latest version. Adding the cephFS and RBD controllerPublish secret that are required for the fencing operation that is supported by ceph-csi with csi-operator. Updated the storageclass to include the secrets incase if user wants to override the defaults in the clientProfile for new PVC's. Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
47 lines
2.1 KiB
YAML
47 lines
2.1 KiB
YAML
apiVersion: storage.k8s.io/v1
|
|
kind: StorageClass
|
|
metadata:
|
|
name: rook-cephfs
|
|
provisioner: rook-ceph.cephfs.csi.ceph.com # csi-provisioner-name
|
|
parameters:
|
|
# clusterID is the namespace where the rook cluster is running
|
|
# If you change this namespace, also change the namespace below where the secret namespaces are defined
|
|
clusterID: rook-ceph # namespace:cluster
|
|
|
|
# CephFS filesystem name into which the volume shall be created
|
|
fsName: myfs
|
|
|
|
# Ceph pool into which the volume shall be created
|
|
# Required for provisionVolume: "true"
|
|
pool: myfs-replicated
|
|
|
|
# The secrets contain Ceph admin credentials. These are generated automatically by the operator
|
|
# in the same namespace as the cluster.
|
|
csi.storage.k8s.io/provisioner-secret-name: rook-csi-cephfs-provisioner
|
|
csi.storage.k8s.io/provisioner-secret-namespace: rook-ceph # namespace:cluster
|
|
csi.storage.k8s.io/controller-expand-secret-name: rook-csi-cephfs-provisioner
|
|
csi.storage.k8s.io/controller-expand-secret-namespace: rook-ceph # namespace:cluster
|
|
csi.storage.k8s.io/controller-publish-secret-name: rook-csi-cephfs-provisioner
|
|
csi.storage.k8s.io/controller-publish-secret-namespace: rook-ceph # namespace:cluster
|
|
csi.storage.k8s.io/node-stage-secret-name: rook-csi-cephfs-node
|
|
csi.storage.k8s.io/node-stage-secret-namespace: rook-ceph # namespace:cluster
|
|
|
|
# (optional) Set it to true to encrypt each volume with encryption keys
|
|
# from a key management system (KMS)
|
|
# encrypted: "true"
|
|
|
|
# (optional) Use external key management system (KMS) for encryption key by
|
|
# specifying a unique ID matching a KMS ConfigMap. The ID is only used for
|
|
# correlation to configmap entry.
|
|
# encryptionKMSID: <kms-config-id>
|
|
|
|
# (optional) The driver can use either ceph-fuse (fuse) or ceph kernel client (kernel)
|
|
# If omitted, default volume mounter will be used - this is determined by probing for ceph-fuse
|
|
# or by setting the default mounter explicitly via --volumemounter command-line argument.
|
|
# mounter: kernel
|
|
reclaimPolicy: Delete
|
|
allowVolumeExpansion: true
|
|
mountOptions:
|
|
# uncomment the following line for debugging
|
|
#- debug
|