| --- |
| rbac: |
| # Specifies whether RBAC resources should be created |
| create: true |
| |
| serviceAccounts: |
| nodeplugin: |
| # Specifies whether a ServiceAccount should be created |
| create: true |
| # The name of the ServiceAccount to use. |
| # If not set and create is true, a name is generated using the fullname |
| name: |
| provisioner: |
| # Specifies whether a ServiceAccount should be created |
| create: true |
| # The name of the ServiceAccount to use. |
| # If not set and create is true, a name is generated using the fullname |
| name: |
| |
| # Configuration for the CSI to connect to the cluster |
| # Ref: https://github.com/ceph/ceph-csi/blob/devel/examples/README.md |
| # Example: |
| # csiConfig: |
| # - clusterID: "<cluster-id>" |
| # monitors: |
| # - "<MONValue1>" |
| # - "<MONValue2>" |
| csiConfig: [] |
| |
| # Configuration details of clusterID,PoolID and FscID mapping |
| # csiMapping: |
| # - clusterIDMapping: |
| # clusterID on site1: clusterID on site2 |
| # RBDPoolIDMapping: |
| # - poolID on site1: poolID on site2 |
| # CephFSFscIDMapping: |
| # - CephFS FscID on site1: CephFS FscID on site2 |
| csiMapping: [] |
| |
| # Configuration for the encryption KMS |
| # Ref: https://github.com/ceph/ceph-csi/blob/devel/docs/deploy-rbd.md |
| # Example: |
| # encryptionKMSConfig: |
| # vault-unique-id-1: |
| # encryptionKMSType: vault |
| # vaultAddress: https://vault.example.com |
| # vaultAuthPath: /v1/auth/kubernetes/login |
| # vaultRole: csi-kubernetes |
| # vaultPassphraseRoot: /v1/secret |
| # vaultPassphrasePath: ceph-csi/ |
| # vaultCAVerify: "false" |
| encryptionKMSConfig: {} |
| |
| # Set logging level for csi containers. |
| # Supported values from 0 to 5. 0 for general useful logs, |
| # 5 for trace level verbosity. |
| logLevel: 5 |
| |
| nodeplugin: |
| name: nodeplugin |
| # set user created priorityclassName for csi plugin pods. default is |
| # system-node-critical which is high priority |
| priorityClassName: system-node-critical |
| # if you are using rbd-nbd client set this value to OnDelete |
| updateStrategy: RollingUpdate |
| |
| httpMetrics: |
| # Metrics only available for cephcsi/cephcsi => 1.2.0 |
| # Specifies whether http metrics should be exposed |
| enabled: true |
| # The port of the container to expose the metrics |
| containerPort: 8080 |
| |
| service: |
| # Specifies whether a service should be created for the metrics |
| enabled: true |
| # The port to use for the service |
| servicePort: 8080 |
| type: ClusterIP |
| |
| # Annotations for the service |
| # Example: |
| # annotations: |
| # prometheus.io/scrape: "true" |
| # prometheus.io/port: "8080" |
| annotations: {} |
| |
| clusterIP: "" |
| |
| ## List of IP addresses at which the stats-exporter service is available |
| ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips |
| ## |
| externalIPs: [] |
| |
| loadBalancerIP: "" |
| loadBalancerSourceRanges: [] |
| |
| profiling: |
| # enable profiling to check for memory leaks |
| enabled: false |
| |
| registrar: |
| image: |
| repository: k8s.gcr.io/sig-storage/csi-node-driver-registrar |
| tag: v2.4.0 |
| pullPolicy: IfNotPresent |
| resources: {} |
| |
| plugin: |
| image: |
| repository: quay.io/cephcsi/cephcsi |
| tag: v3.5.1 |
| pullPolicy: IfNotPresent |
| resources: {} |
| |
| nodeSelector: {} |
| |
| tolerations: [] |
| |
| affinity: {} |
| |
| # If true, create & use Pod Security Policy resources |
| # https://kubernetes.io/docs/concepts/policy/pod-security-policy/ |
| podSecurityPolicy: |
| enabled: false |
| |
| provisioner: |
| name: provisioner |
| replicaCount: 3 |
| strategy: |
| # RollingUpdate strategy replaces old pods with new ones gradually, |
| # without incurring downtime. |
| type: RollingUpdate |
| rollingUpdate: |
| # maxUnavailable is the maximum number of pods that can be |
| # unavailable during the update process. |
| maxUnavailable: 50% |
| # if fstype is not specified in storageclass, ext4 is default |
| defaultFSType: ext4 |
| # deployController to enable or disable the deployment of controller which |
| # generates the OMAP data if its not Present. |
| deployController: true |
| # Timeout for waiting for creation or deletion of a volume |
| timeout: 60s |
| # Hard limit for maximum number of nested volume clones that are taken before |
| # a flatten occurs |
| hardMaxCloneDepth: 8 |
| # Soft limit for maximum number of nested volume clones that are taken before |
| # a flatten occurs |
| softMaxCloneDepth: 4 |
| # Maximum number of snapshots allowed on rbd image without flattening |
| maxSnapshotsOnImage: 450 |
| # Minimum number of snapshots allowed on rbd image to trigger flattening |
| minSnapshotsOnImage: 250 |
| # skip image flattening if kernel support mapping of rbd images |
| # which has the deep-flatten feature |
| # skipForceFlatten: false |
| |
| # set user created priorityclassName for csi provisioner pods. default is |
| # system-cluster-critical which is less priority than system-node-critical |
| priorityClassName: system-cluster-critical |
| |
| httpMetrics: |
| # Metrics only available for cephcsi/cephcsi => 1.2.0 |
| # Specifies whether http metrics should be exposed |
| enabled: true |
| # The port of the container to expose the metrics |
| containerPort: 8080 |
| |
| service: |
| # Specifies whether a service should be created for the metrics |
| enabled: true |
| # The port to use for the service |
| servicePort: 8080 |
| type: ClusterIP |
| |
| # Annotations for the service |
| # Example: |
| # annotations: |
| # prometheus.io/scrape: "true" |
| # prometheus.io/port: "8080" |
| annotations: {} |
| |
| clusterIP: "" |
| |
| ## List of IP addresses at which the stats-exporter service is available |
| ## Ref: https://kubernetes.io/docs/user-guide/services/#external-ips |
| ## |
| externalIPs: [] |
| |
| loadBalancerIP: "" |
| loadBalancerSourceRanges: [] |
| |
| profiling: |
| # enable profiling to check for memory leaks |
| enabled: false |
| |
| provisioner: |
| image: |
| repository: k8s.gcr.io/sig-storage/csi-provisioner |
| tag: v3.1.0 |
| pullPolicy: IfNotPresent |
| resources: {} |
| |
| attacher: |
| name: attacher |
| enabled: true |
| image: |
| repository: k8s.gcr.io/sig-storage/csi-attacher |
| tag: v3.4.0 |
| pullPolicy: IfNotPresent |
| resources: {} |
| |
| resizer: |
| name: resizer |
| enabled: true |
| image: |
| repository: k8s.gcr.io/sig-storage/csi-resizer |
| tag: v1.3.0 |
| pullPolicy: IfNotPresent |
| resources: {} |
| |
| snapshotter: |
| image: |
| repository: k8s.gcr.io/sig-storage/csi-snapshotter |
| tag: v4.2.0 |
| pullPolicy: IfNotPresent |
| resources: {} |
| |
| nodeSelector: {} |
| |
| tolerations: [] |
| |
| affinity: {} |
| |
| # If true, create & use Pod Security Policy resources |
| # https://kubernetes.io/docs/concepts/policy/pod-security-policy/ |
| podSecurityPolicy: |
| enabled: false |
| |
| topology: |
| # Specifies whether topology based provisioning support should |
| # be exposed by CSI |
| enabled: false |
| # domainLabels define which node labels to use as domains |
| # for CSI nodeplugins to advertise their domains |
| # NOTE: the value here serves as an example and needs to be |
| # updated with node labels that define domains of interest |
| domainLabels: |
| - failure-domain/region |
| - failure-domain/zone |
| |
| storageClass: |
| # Specifies whether the storageclass should be created |
| create: false |
| name: csi-rbd-sc |
| |
| # Annotations for the storage class |
| # Example: |
| # annotations: |
| # storageclass.kubernetes.io/is-default-class: "true" |
| annotations: {} |
| |
| # (required) String representing a Ceph cluster to provision storage from. |
| # Should be unique across all Ceph clusters in use for provisioning, |
| # cannot be greater than 36 bytes in length, and should remain immutable for |
| # the lifetime of the StorageClass in use. |
| clusterID: <cluster-ID> |
| |
| # (optional) If you want to use erasure coded pool with RBD, you need to |
| # create two pools. one erasure coded and one replicated. |
| # You need to specify the replicated pool here in the `pool` parameter, it is |
| # used for the metadata of the images. |
| # The erasure coded pool must be set as the `dataPool` parameter below. |
| # dataPool: <ec-data-pool> |
| dataPool: "" |
| |
| # (required) Ceph pool into which the RBD image shall be created |
| # eg: pool: replicapool |
| pool: replicapool |
| |
| # Set thickProvision to true if you want RBD images to be fully allocated on |
| # creation (thin provisioning is the default). |
| thickProvision: false |
| |
| # (required) RBD image features, CSI creates image with image-format 2 |
| # CSI RBD currently supports `layering`, `journaling`, `exclusive-lock`, |
| # `object-map`, `fast-diff` features. If `journaling` is enabled, must |
| # enable `exclusive-lock` too. |
| # imageFeatures: layering,journaling,exclusive-lock,object-map,fast-diff |
| imageFeatures: "layering" |
| |
| # (optional) Specifies whether to try other mounters in case if the current |
| # mounter fails to mount the rbd image for any reason. True means fallback |
| # to next mounter, default is set to false. |
| # Note: tryOtherMounters is currently useful to fallback from krbd to rbd-nbd |
| # in case if any of the specified imageFeatures is not supported by krbd |
| # driver on node scheduled for application pod launch, but in the future this |
| # should work with any mounter type. |
| # tryOtherMounters: false |
| |
| # (optional) uncomment the following to use rbd-nbd as mounter |
| # on supported nodes |
| # mounter: rbd-nbd |
| mounter: "" |
| |
| # (optional) ceph client log location, eg: rbd-nbd |
| # By default host-path /var/log/ceph of node is bind-mounted into |
| # csi-rbdplugin pod at /var/log/ceph mount path. This is to configure |
| # target bindmount path used inside container for ceph clients logging. |
| # See docs/rbd-nbd.md for available configuration options. |
| # cephLogDir: /var/log/ceph |
| cephLogDir: "" |
| |
| # (optional) ceph client log strategy |
| # By default, log file belonging to a particular volume will be deleted |
| # on unmap, but you can choose to just compress instead of deleting it |
| # or even preserve the log file in text format as it is. |
| # Available options `remove` or `compress` or `preserve` |
| # cephLogStrategy: remove |
| cephLogStrategy: "" |
| |
| # (optional) Prefix to use for naming RBD images. |
| # If omitted, defaults to "csi-vol-". |
| # volumeNamePrefix: "foo-bar-" |
| volumeNamePrefix: "" |
| |
| # (optional) Instruct the plugin it has to encrypt the volume |
| # By default it is disabled. Valid values are "true" or "false". |
| # A string is expected here, i.e. "true", not true. |
| # encrypted: "true" |
| encrypted: "" |
| |
| # (optional) Use external key management system for encryption passphrases by |
| # specifying a unique ID matching KMS ConfigMap. The ID is only used for |
| # correlation to configmap entry. |
| encryptionKMSID: "" |
| |
| # Add topology constrained pools configuration, if topology based pools |
| # are setup, and topology constrained provisioning is required. |
| # For further information read TODO<doc> |
| # topologyConstrainedPools: | |
| # [{"poolName":"pool0", |
| # "dataPool":"ec-pool0" # optional, erasure-coded pool for data |
| # "domainSegments":[ |
| # {"domainLabel":"region","value":"east"}, |
| # {"domainLabel":"zone","value":"zone1"}]}, |
| # {"poolName":"pool1", |
| # "dataPool":"ec-pool1" # optional, erasure-coded pool for data |
| # "domainSegments":[ |
| # {"domainLabel":"region","value":"east"}, |
| # {"domainLabel":"zone","value":"zone2"}]}, |
| # {"poolName":"pool2", |
| # "dataPool":"ec-pool2" # optional, erasure-coded pool for data |
| # "domainSegments":[ |
| # {"domainLabel":"region","value":"west"}, |
| # {"domainLabel":"zone","value":"zone1"}]} |
| # ] |
| topologyConstrainedPools: [] |
| |
| # (optional) mapOptions is a comma-separated list of map options. |
| # For krbd options refer |
| # https://docs.ceph.com/docs/master/man/8/rbd/#kernel-rbd-krbd-options |
| # For nbd options refer |
| # https://docs.ceph.com/docs/master/man/8/rbd-nbd/#options |
| # Format: |
| # mapOptions: "<mounter>:op1,op2;<mounter>:op1,op2" |
| # An empty mounter field is treated as krbd type for compatibility. |
| # eg: |
| # mapOptions: "krbd:lock_on_read,queue_depth=1024;nbd:try-netlink" |
| mapOptions: "" |
| |
| # (optional) unmapOptions is a comma-separated list of unmap options. |
| # For krbd options refer |
| # https://docs.ceph.com/docs/master/man/8/rbd/#kernel-rbd-krbd-options |
| # For nbd options refer |
| # https://docs.ceph.com/docs/master/man/8/rbd-nbd/#options |
| # Format: |
| # unmapOptions: "<mounter>:op1,op2;<mounter>:op1,op2" |
| # An empty mounter field is treated as krbd type for compatibility. |
| # eg: |
| # unmapOptions: "krbd:force;nbd:force" |
| unmapOptions: "" |
| |
| # The secrets have to contain Ceph credentials with required access |
| # to the 'pool'. |
| provisionerSecret: csi-rbd-secret |
| # If Namespaces are left empty, the secrets are assumed to be in the |
| # Release namespace. |
| provisionerSecretNamespace: "" |
| controllerExpandSecret: csi-rbd-secret |
| controllerExpandSecretNamespace: "" |
| nodeStageSecret: csi-rbd-secret |
| nodeStageSecretNamespace: "" |
| # Specify the filesystem type of the volume. If not specified, |
| # csi-provisioner will set default as `ext4`. |
| fstype: ext4 |
| reclaimPolicy: Delete |
| allowVolumeExpansion: true |
| mountOptions: [] |
| # Mount Options |
| # Example: |
| # mountOptions: |
| # - discard |
| |
| secret: |
| # Specifies whether the secret should be created |
| create: false |
| name: csi-rbd-secret |
| # Key values correspond to a user name and its key, as defined in the |
| # ceph cluster. User ID should have required access to the 'pool' |
| # specified in the storage class |
| userID: <plaintext ID> |
| userKey: <Ceph auth key corresponding to userID above> |
| # Encryption passphrase |
| encryptionPassphrase: test_passphrase |
| |
| # This is a sample configmap that helps define a Ceph configuration as required |
| # by the CSI plugins. |
| # Sample ceph.conf available at |
| # https://github.com/ceph/ceph/blob/master/src/sample.ceph.conf Detailed |
| # documentation is available at |
| # https://docs.ceph.com/en/latest/rados/configuration/ceph-conf/ |
| cephconf: | |
| [global] |
| auth_cluster_required = cephx |
| auth_service_required = cephx |
| auth_client_required = cephx |
| |
| # Workaround for http://tracker.ceph.com/issues/23446 |
| fuse_set_user_groups = false |
| |
| # ceph-fuse which uses libfuse2 by default has write buffer size of 2KiB |
| # adding 'fuse_big_writes = true' option by default to override this limit |
| # see https://github.com/ceph/ceph-csi/issues/1928 |
| fuse_big_writes = true |
| |
| ######################################################### |
| # Variables for 'internal' use please use with caution! # |
| ######################################################### |
| |
| # The filename of the provisioner socket |
| provisionerSocketFile: csi-provisioner.sock |
| # The filename of the plugin socket |
| pluginSocketFile: csi.sock |
| # kubelet working directory,can be set using `--root-dir` when starting kubelet. |
| kubeletDir: /var/lib/kubelet |
| # Host path location for ceph client processes logging, ex: rbd-nbd |
| cephLogDirHostPath: /var/log/ceph |
| # Name of the csi-driver |
| driverName: rbd.csi.ceph.com |
| # Name of the configmap used for state |
| configMapName: ceph-csi-config |
| # Key to use in the Configmap if not config.json |
| # configMapKey: |
| # Use an externally provided configmap |
| externallyManagedConfigmap: false |
| # Name of the configmap used for encryption kms configuration |
| kmsConfigMapName: ceph-csi-encryption-kms-config |