blob: 87ceb2254186fb7837d8cd715ab1e8b4bfe562a3 [file] [log] [blame]
okozachenko120323147262023-01-28 04:16:42 +11001# Default values for rook-ceph-operator
2# This is a YAML-formatted file.
3# Declare variables to be passed into your templates.
4
5image:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +00006 # -- Image
okozachenko120323147262023-01-28 04:16:42 +11007 repository: rook/ceph
Mohammed Naserfc4a62c2023-02-10 02:59:17 +00008 # -- Image tag
Mohammed Naser7d1623e2024-06-17 09:12:39 -04009 # @default -- `v1.14.5`
10 tag: v1.14.5
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000011 # -- Image pull policy
okozachenko120323147262023-01-28 04:16:42 +110012 pullPolicy: IfNotPresent
13
14crds:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000015 # -- Whether the helm chart should create and update the CRDs. If false, the CRDs must be
okozachenko120323147262023-01-28 04:16:42 +110016 # managed independently with deploy/examples/crds.yaml.
17 # **WARNING** Only set during first deployment. If later disabled the cluster may be DESTROYED.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000018 # If the CRDs are deleted in this case, see
19 # [the disaster recovery guide](https://rook.io/docs/rook/latest/Troubleshooting/disaster-recovery/#restoring-crds-after-deletion)
20 # to restore them.
okozachenko120323147262023-01-28 04:16:42 +110021 enabled: true
22
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000023# -- Pod resource requests & limits
okozachenko120323147262023-01-28 04:16:42 +110024resources:
25 limits:
okozachenko120323147262023-01-28 04:16:42 +110026 memory: 512Mi
27 requests:
Mohammed Naser65cda132024-05-02 14:34:08 -040028 cpu: 200m
okozachenko120323147262023-01-28 04:16:42 +110029 memory: 128Mi
30
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000031# -- Kubernetes [`nodeSelector`](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector) to add to the Deployment.
okozachenko120323147262023-01-28 04:16:42 +110032nodeSelector: {}
33# Constraint rook-ceph-operator Deployment to nodes with label `disktype: ssd`.
34# For more info, see https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
35# disktype: ssd
36
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000037# -- List of Kubernetes [`tolerations`](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) to add to the Deployment.
okozachenko120323147262023-01-28 04:16:42 +110038tolerations: []
39
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000040# -- Delay to use for the `node.kubernetes.io/unreachable` pod failure toleration to override
41# the Kubernetes default of 5 minutes
okozachenko120323147262023-01-28 04:16:42 +110042unreachableNodeTolerationSeconds: 5
43
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000044# -- Whether the operator should watch cluster CRD in its own namespace or not
okozachenko120323147262023-01-28 04:16:42 +110045currentNamespaceOnly: false
46
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000047# -- Pod annotations
okozachenko120323147262023-01-28 04:16:42 +110048annotations: {}
49
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000050# -- Global log level for the operator.
51# Options: `ERROR`, `WARNING`, `INFO`, `DEBUG`
okozachenko120323147262023-01-28 04:16:42 +110052logLevel: INFO
53
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000054# -- If true, create & use RBAC resources
okozachenko120323147262023-01-28 04:16:42 +110055rbacEnable: true
56
Mohammed Naser65cda132024-05-02 14:34:08 -040057rbacAggregate:
58 # -- If true, create a ClusterRole aggregated to [user facing roles](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles) for objectbucketclaims
59 enableOBCs: false
60
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000061# -- If true, create & use PSP resources
62pspEnable: false
okozachenko120323147262023-01-28 04:16:42 +110063
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000064# -- Set the priority class for the rook operator deployment if desired
65priorityClassName:
okozachenko120323147262023-01-28 04:16:42 +110066
Mohammed Naser65cda132024-05-02 14:34:08 -040067# -- Set the container security context for the operator
68containerSecurityContext:
69 runAsNonRoot: true
70 runAsUser: 2016
71 runAsGroup: 2016
72 capabilities:
73 drop: ["ALL"]
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000074# -- If true, loop devices are allowed to be used for osds in test clusters
75allowLoopDevices: false
76
77# Settings for whether to disable the drivers or other daemons if they are not
78# needed
okozachenko120323147262023-01-28 04:16:42 +110079csi:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000080 # -- Enable Ceph CSI RBD driver
okozachenko120323147262023-01-28 04:16:42 +110081 enableRbdDriver: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000082 # -- Enable Ceph CSI CephFS driver
okozachenko120323147262023-01-28 04:16:42 +110083 enableCephfsDriver: true
Mohammed Naser65cda132024-05-02 14:34:08 -040084 # -- Disable the CSI driver.
85 disableCsiDriver: "false"
86
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000087 # -- Enable host networking for CSI CephFS and RBD nodeplugins. This may be necessary
okozachenko120323147262023-01-28 04:16:42 +110088 # in some network configurations where the SDN does not provide access to an external cluster or
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000089 # there is significant drop in read/write performance
okozachenko120323147262023-01-28 04:16:42 +110090 enableCSIHostNetwork: true
Mohammed Naser65cda132024-05-02 14:34:08 -040091 # -- Deprecation note: Rook uses "holder" pods to allow CSI to connect to the multus public network
92 # without needing hosts to the network. Holder pods are being removed. See issue for details:
93 # https://github.com/rook/rook/issues/13055. New Rook deployments should set this to "true".
94 disableHolderPods: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000095 # -- Enable Snapshotter in CephFS provisioner pod
okozachenko120323147262023-01-28 04:16:42 +110096 enableCephfsSnapshotter: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000097 # -- Enable Snapshotter in NFS provisioner pod
okozachenko120323147262023-01-28 04:16:42 +110098 enableNFSSnapshotter: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +000099 # -- Enable Snapshotter in RBD provisioner pod
okozachenko120323147262023-01-28 04:16:42 +1100100 enableRBDSnapshotter: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000101 # -- Enable Host mount for `/etc/selinux` directory for Ceph CSI nodeplugins
okozachenko120323147262023-01-28 04:16:42 +1100102 enablePluginSelinuxHostMount: false
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000103 # -- Enable Ceph CSI PVC encryption support
okozachenko120323147262023-01-28 04:16:42 +1100104 enableCSIEncryption: false
105
Mohammed Naser65cda132024-05-02 14:34:08 -0400106 # -- Enable volume group snapshot feature. This feature is
107 # enabled by default as long as the necessary CRDs are available in the cluster.
108 enableVolumeGroupSnapshot: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000109 # -- PriorityClassName to be set on csi driver plugin pods
okozachenko120323147262023-01-28 04:16:42 +1100110 pluginPriorityClassName: system-node-critical
111
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000112 # -- PriorityClassName to be set on csi driver provisioner pods
okozachenko120323147262023-01-28 04:16:42 +1100113 provisionerPriorityClassName: system-cluster-critical
114
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000115 # -- Policy for modifying a volume's ownership or permissions when the RBD PVC is being mounted.
okozachenko120323147262023-01-28 04:16:42 +1100116 # supported values are documented at https://kubernetes-csi.github.io/docs/support-fsgroup.html
117 rbdFSGroupPolicy: "File"
118
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000119 # -- Policy for modifying a volume's ownership or permissions when the CephFS PVC is being mounted.
okozachenko120323147262023-01-28 04:16:42 +1100120 # supported values are documented at https://kubernetes-csi.github.io/docs/support-fsgroup.html
121 cephFSFSGroupPolicy: "File"
122
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000123 # -- Policy for modifying a volume's ownership or permissions when the NFS PVC is being mounted.
okozachenko120323147262023-01-28 04:16:42 +1100124 # supported values are documented at https://kubernetes-csi.github.io/docs/support-fsgroup.html
125 nfsFSGroupPolicy: "File"
126
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000127 # -- OMAP generator generates the omap mapping between the PV name and the RBD image
okozachenko120323147262023-01-28 04:16:42 +1100128 # which helps CSI to identify the rbd images for CSI operations.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000129 # `CSI_ENABLE_OMAP_GENERATOR` needs to be enabled when we are using rbd mirroring feature.
130 # By default OMAP generator is disabled and when enabled, it will be deployed as a
okozachenko120323147262023-01-28 04:16:42 +1100131 # sidecar with CSI provisioner pod, to enable set it to true.
132 enableOMAPGenerator: false
133
Mohammed Naser65cda132024-05-02 14:34:08 -0400134 # -- Set CephFS Kernel mount options to use https://docs.ceph.com/en/latest/man/8/mount.ceph/#options.
135 # Set to "ms_mode=secure" when connections.encrypted is enabled in CephCluster CR
136 cephFSKernelMountOptions:
137
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000138 # -- Enable adding volume metadata on the CephFS subvolumes and RBD images.
okozachenko120323147262023-01-28 04:16:42 +1100139 # Not all users might be interested in getting volume/snapshot details as metadata on CephFS subvolume and RBD images.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000140 # Hence enable metadata is false by default
okozachenko120323147262023-01-28 04:16:42 +1100141 enableMetadata: false
142
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000143 # -- Set replicas for csi provisioner deployment
okozachenko120323147262023-01-28 04:16:42 +1100144 provisionerReplicas: 2
145
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000146 # -- Cluster name identifier to set as metadata on the CephFS subvolume and RBD images. This will be useful
147 # in cases like for example, when two container orchestrator clusters (Kubernetes/OCP) are using a single ceph cluster
148 clusterName:
149
150 # -- Set logging level for cephCSI containers maintained by the cephCSI.
okozachenko120323147262023-01-28 04:16:42 +1100151 # Supported values from 0 to 5. 0 for general useful logs, 5 for trace level verbosity.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000152 logLevel: 0
153
154 # -- Set logging level for Kubernetes-csi sidecar containers.
okozachenko120323147262023-01-28 04:16:42 +1100155 # Supported values from 0 to 5. 0 for general useful logs (the default), 5 for trace level verbosity.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000156 # @default -- `0`
157 sidecarLogLevel:
158
Mohammed Naser65cda132024-05-02 14:34:08 -0400159 # -- CSI driver name prefix for cephfs, rbd and nfs.
160 # @default -- `namespace name where rook-ceph operator is deployed`
161 csiDriverNamePrefix:
162
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000163 # -- CSI RBD plugin daemonset update strategy, supported values are OnDelete and RollingUpdate
164 # @default -- `RollingUpdate`
165 rbdPluginUpdateStrategy:
166
167 # -- A maxUnavailable parameter of CSI RBD plugin daemonset update strategy.
168 # @default -- `1`
169 rbdPluginUpdateStrategyMaxUnavailable:
170
171 # -- CSI CephFS plugin daemonset update strategy, supported values are OnDelete and RollingUpdate
172 # @default -- `RollingUpdate`
173 cephFSPluginUpdateStrategy:
174
Mohammed Naser65cda132024-05-02 14:34:08 -0400175 # -- A maxUnavailable parameter of CSI cephFS plugin daemonset update strategy.
176 # @default -- `1`
177 cephFSPluginUpdateStrategyMaxUnavailable:
178
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000179 # -- CSI NFS plugin daemonset update strategy, supported values are OnDelete and RollingUpdate
180 # @default -- `RollingUpdate`
181 nfsPluginUpdateStrategy:
182
183 # -- Set GRPC timeout for csi containers (in seconds). It should be >= 120. If this value is not set or is invalid, it defaults to 150
okozachenko120323147262023-01-28 04:16:42 +1100184 grpcTimeoutInSeconds: 150
185
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000186 # -- Allow starting an unsupported ceph-csi image
okozachenko120323147262023-01-28 04:16:42 +1100187 allowUnsupportedVersion: false
188
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000189 # -- The volume of the CephCSI RBD plugin DaemonSet
190 csiRBDPluginVolume:
okozachenko120323147262023-01-28 04:16:42 +1100191 # - name: lib-modules
192 # hostPath:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000193 # path: /run/booted-system/kernel-modules/lib/modules/
okozachenko120323147262023-01-28 04:16:42 +1100194 # - name: host-nix
195 # hostPath:
196 # path: /nix
197
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000198 # -- The volume mounts of the CephCSI RBD plugin DaemonSet
199 csiRBDPluginVolumeMount:
okozachenko120323147262023-01-28 04:16:42 +1100200 # - name: host-nix
201 # mountPath: /nix
202 # readOnly: true
203
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000204 # -- The volume of the CephCSI CephFS plugin DaemonSet
205 csiCephFSPluginVolume:
okozachenko120323147262023-01-28 04:16:42 +1100206 # - name: lib-modules
207 # hostPath:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000208 # path: /run/booted-system/kernel-modules/lib/modules/
okozachenko120323147262023-01-28 04:16:42 +1100209 # - name: host-nix
210 # hostPath:
211 # path: /nix
212
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000213 # -- The volume mounts of the CephCSI CephFS plugin DaemonSet
214 csiCephFSPluginVolumeMount:
okozachenko120323147262023-01-28 04:16:42 +1100215 # - name: host-nix
216 # mountPath: /nix
217 # readOnly: true
218
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000219 # -- CEPH CSI RBD provisioner resource requirement list
220 # csi-omap-generator resources will be applied only if `enableOMAPGenerator` is set to `true`
221 # @default -- see values.yaml
okozachenko120323147262023-01-28 04:16:42 +1100222 csiRBDProvisionerResource: |
223 - name : csi-provisioner
224 resource:
225 requests:
226 memory: 128Mi
227 cpu: 100m
228 limits:
229 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100230 - name : csi-resizer
231 resource:
232 requests:
233 memory: 128Mi
234 cpu: 100m
235 limits:
236 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100237 - name : csi-attacher
238 resource:
239 requests:
240 memory: 128Mi
241 cpu: 100m
242 limits:
243 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100244 - name : csi-snapshotter
245 resource:
246 requests:
247 memory: 128Mi
248 cpu: 100m
249 limits:
250 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100251 - name : csi-rbdplugin
252 resource:
253 requests:
254 memory: 512Mi
okozachenko120323147262023-01-28 04:16:42 +1100255 limits:
256 memory: 1Gi
okozachenko120323147262023-01-28 04:16:42 +1100257 - name : csi-omap-generator
258 resource:
259 requests:
260 memory: 512Mi
261 cpu: 250m
262 limits:
263 memory: 1Gi
okozachenko120323147262023-01-28 04:16:42 +1100264 - name : liveness-prometheus
265 resource:
266 requests:
267 memory: 128Mi
268 cpu: 50m
269 limits:
270 memory: 256Mi
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000271
272 # -- CEPH CSI RBD plugin resource requirement list
273 # @default -- see values.yaml
okozachenko120323147262023-01-28 04:16:42 +1100274 csiRBDPluginResource: |
275 - name : driver-registrar
276 resource:
277 requests:
278 memory: 128Mi
279 cpu: 50m
280 limits:
281 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100282 - name : csi-rbdplugin
283 resource:
284 requests:
285 memory: 512Mi
286 cpu: 250m
287 limits:
288 memory: 1Gi
okozachenko120323147262023-01-28 04:16:42 +1100289 - name : liveness-prometheus
290 resource:
291 requests:
292 memory: 128Mi
293 cpu: 50m
294 limits:
295 memory: 256Mi
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000296
297 # -- CEPH CSI CephFS provisioner resource requirement list
298 # @default -- see values.yaml
okozachenko120323147262023-01-28 04:16:42 +1100299 csiCephFSProvisionerResource: |
300 - name : csi-provisioner
301 resource:
302 requests:
303 memory: 128Mi
304 cpu: 100m
305 limits:
306 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100307 - name : csi-resizer
308 resource:
309 requests:
310 memory: 128Mi
311 cpu: 100m
312 limits:
313 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100314 - name : csi-attacher
315 resource:
316 requests:
317 memory: 128Mi
318 cpu: 100m
319 limits:
320 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100321 - name : csi-snapshotter
322 resource:
323 requests:
324 memory: 128Mi
325 cpu: 100m
326 limits:
327 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100328 - name : csi-cephfsplugin
329 resource:
330 requests:
331 memory: 512Mi
332 cpu: 250m
333 limits:
334 memory: 1Gi
okozachenko120323147262023-01-28 04:16:42 +1100335 - name : liveness-prometheus
336 resource:
337 requests:
338 memory: 128Mi
339 cpu: 50m
340 limits:
341 memory: 256Mi
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000342
343 # -- CEPH CSI CephFS plugin resource requirement list
344 # @default -- see values.yaml
okozachenko120323147262023-01-28 04:16:42 +1100345 csiCephFSPluginResource: |
346 - name : driver-registrar
347 resource:
348 requests:
349 memory: 128Mi
350 cpu: 50m
351 limits:
352 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100353 - name : csi-cephfsplugin
354 resource:
355 requests:
356 memory: 512Mi
357 cpu: 250m
358 limits:
359 memory: 1Gi
okozachenko120323147262023-01-28 04:16:42 +1100360 - name : liveness-prometheus
361 resource:
362 requests:
363 memory: 128Mi
364 cpu: 50m
365 limits:
366 memory: 256Mi
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000367
368 # -- CEPH CSI NFS provisioner resource requirement list
369 # @default -- see values.yaml
okozachenko120323147262023-01-28 04:16:42 +1100370 csiNFSProvisionerResource: |
371 - name : csi-provisioner
372 resource:
373 requests:
374 memory: 128Mi
375 cpu: 100m
376 limits:
377 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100378 - name : csi-nfsplugin
379 resource:
380 requests:
381 memory: 512Mi
382 cpu: 250m
383 limits:
384 memory: 1Gi
Mohammed Naser65cda132024-05-02 14:34:08 -0400385 - name : csi-attacher
386 resource:
387 requests:
388 memory: 512Mi
389 cpu: 250m
390 limits:
391 memory: 1Gi
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000392
393 # -- CEPH CSI NFS plugin resource requirement list
394 # @default -- see values.yaml
okozachenko120323147262023-01-28 04:16:42 +1100395 csiNFSPluginResource: |
396 - name : driver-registrar
397 resource:
398 requests:
399 memory: 128Mi
400 cpu: 50m
401 limits:
402 memory: 256Mi
okozachenko120323147262023-01-28 04:16:42 +1100403 - name : csi-nfsplugin
404 resource:
405 requests:
406 memory: 512Mi
407 cpu: 250m
408 limits:
409 memory: 1Gi
okozachenko120323147262023-01-28 04:16:42 +1100410
411 # Set provisionerTolerations and provisionerNodeAffinity for provisioner pod.
412 # The CSI provisioner would be best to start on the same nodes as other ceph daemons.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000413
414 # -- Array of tolerations in YAML format which will be added to CSI provisioner deployment
415 provisionerTolerations:
okozachenko120323147262023-01-28 04:16:42 +1100416 # - key: key
417 # operator: Exists
418 # effect: NoSchedule
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000419
420 # -- The node labels for affinity of the CSI provisioner deployment [^1]
421 provisionerNodeAffinity: #key1=value1,value2; key2=value3
okozachenko120323147262023-01-28 04:16:42 +1100422 # Set pluginTolerations and pluginNodeAffinity for plugin daemonset pods.
423 # The CSI plugins need to be started on all the nodes where the clients need to mount the storage.
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000424
425 # -- Array of tolerations in YAML format which will be added to CephCSI plugin DaemonSet
426 pluginTolerations:
okozachenko120323147262023-01-28 04:16:42 +1100427 # - key: key
428 # operator: Exists
429 # effect: NoSchedule
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000430
431 # -- The node labels for affinity of the CephCSI RBD plugin DaemonSet [^1]
432 pluginNodeAffinity: # key1=value1,value2; key2=value3
433
434 # -- Enable Ceph CSI Liveness sidecar deployment
okozachenko120323147262023-01-28 04:16:42 +1100435 enableLiveness: false
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000436
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000437 # -- CSI CephFS driver metrics port
438 # @default -- `9081`
439 cephfsLivenessMetricsPort:
440
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000441 # -- CSI Addons server port
442 # @default -- `9070`
443 csiAddonsPort:
444
445 # -- Enable Ceph Kernel clients on kernel < 4.17. If your kernel does not support quotas for CephFS
okozachenko120323147262023-01-28 04:16:42 +1100446 # you may want to disable this setting. However, this will cause an issue during upgrades
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000447 # with the FUSE client. See the [upgrade guide](https://rook.io/docs/rook/v1.2/ceph-upgrade.html)
okozachenko120323147262023-01-28 04:16:42 +1100448 forceCephFSKernelClient: true
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000449
450 # -- Ceph CSI RBD driver metrics port
451 # @default -- `8080`
452 rbdLivenessMetricsPort:
453
Mohammed Naser65cda132024-05-02 14:34:08 -0400454 serviceMonitor:
455 # -- Enable ServiceMonitor for Ceph CSI drivers
456 enabled: false
457 # -- Service monitor scrape interval
458 interval: 10s
459 # -- ServiceMonitor additional labels
460 labels: {}
461 # -- Use a different namespace for the ServiceMonitor
462 namespace:
463
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000464 # -- Kubelet root directory path (if the Kubelet uses a different path for the `--root-dir` flag)
465 # @default -- `/var/lib/kubelet`
466 kubeletDirPath:
467
Mohammed Naser65cda132024-05-02 14:34:08 -0400468 # -- Duration in seconds that non-leader candidates will wait to force acquire leadership.
469 # @default -- `137s`
470 csiLeaderElectionLeaseDuration:
471
472 # -- Deadline in seconds that the acting leader will retry refreshing leadership before giving up.
473 # @default -- `107s`
474 csiLeaderElectionRenewDeadline:
475
476 # -- Retry period in seconds the LeaderElector clients should wait between tries of actions.
477 # @default -- `26s`
478 csiLeaderElectionRetryPeriod:
479
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000480 cephcsi:
Mohammed Naser65cda132024-05-02 14:34:08 -0400481 # -- Ceph CSI image repository
482 repository: quay.io/cephcsi/cephcsi
483 # -- Ceph CSI image tag
484 tag: v3.11.0
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000485
486 registrar:
Mohammed Naser65cda132024-05-02 14:34:08 -0400487 # -- Kubernetes CSI registrar image repository
488 repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
489 # -- Registrar image tag
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400490 tag: v2.10.1
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000491
492 provisioner:
Mohammed Naser65cda132024-05-02 14:34:08 -0400493 # -- Kubernetes CSI provisioner image repository
494 repository: registry.k8s.io/sig-storage/csi-provisioner
495 # -- Provisioner image tag
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400496 tag: v4.0.1
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000497
498 snapshotter:
Mohammed Naser65cda132024-05-02 14:34:08 -0400499 # -- Kubernetes CSI snapshotter image repository
500 repository: registry.k8s.io/sig-storage/csi-snapshotter
501 # -- Snapshotter image tag
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400502 tag: v7.0.2
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000503
504 attacher:
Mohammed Naser65cda132024-05-02 14:34:08 -0400505 # -- Kubernetes CSI Attacher image repository
506 repository: registry.k8s.io/sig-storage/csi-attacher
507 # -- Attacher image tag
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400508 tag: v4.5.1
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000509
510 resizer:
Mohammed Naser65cda132024-05-02 14:34:08 -0400511 # -- Kubernetes CSI resizer image repository
512 repository: registry.k8s.io/sig-storage/csi-resizer
513 # -- Resizer image tag
Mohammed Naser7d1623e2024-06-17 09:12:39 -0400514 tag: v1.10.1
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000515
516 # -- Image pull policy
517 imagePullPolicy: IfNotPresent
518
519 # -- Labels to add to the CSI CephFS Deployments and DaemonSets Pods
520 cephfsPodLabels: #"key1=value1,key2=value2"
521
522 # -- Labels to add to the CSI NFS Deployments and DaemonSets Pods
523 nfsPodLabels: #"key1=value1,key2=value2"
524
525 # -- Labels to add to the CSI RBD Deployments and DaemonSets Pods
526 rbdPodLabels: #"key1=value1,key2=value2"
527
okozachenko120323147262023-01-28 04:16:42 +1100528 csiAddons:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000529 # -- Enable CSIAddons
okozachenko120323147262023-01-28 04:16:42 +1100530 enabled: false
Mohammed Naser65cda132024-05-02 14:34:08 -0400531 # -- CSIAddons sidecar image repository
532 repository: quay.io/csiaddons/k8s-sidecar
533 # -- CSIAddons sidecar image tag
534 tag: v0.8.0
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000535
okozachenko120323147262023-01-28 04:16:42 +1100536 nfs:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000537 # -- Enable the nfs csi driver
okozachenko120323147262023-01-28 04:16:42 +1100538 enabled: false
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000539
okozachenko120323147262023-01-28 04:16:42 +1100540 topology:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000541 # -- Enable topology based provisioning
okozachenko120323147262023-01-28 04:16:42 +1100542 enabled: false
okozachenko120323147262023-01-28 04:16:42 +1100543 # NOTE: the value here serves as an example and needs to be
544 # updated with node labels that define domains of interest
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000545 # -- domainLabels define which node labels to use as domains
546 # for CSI nodeplugins to advertise their domains
547 domainLabels:
okozachenko120323147262023-01-28 04:16:42 +1100548 # - kubernetes.io/hostname
549 # - topology.kubernetes.io/zone
550 # - topology.rook.io/rack
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000551
Mohammed Naser65cda132024-05-02 14:34:08 -0400552 # -- Whether to skip any attach operation altogether for CephFS PVCs. See more details
553 # [here](https://kubernetes-csi.github.io/docs/skip-attach.html#skip-attach-with-csi-driver-object).
554 # If cephFSAttachRequired is set to false it skips the volume attachments and makes the creation
555 # of pods using the CephFS PVC fast. **WARNING** It's highly discouraged to use this for
556 # CephFS RWO volumes. Refer to this [issue](https://github.com/kubernetes/kubernetes/issues/103305) for more details.
557 cephFSAttachRequired: true
558 # -- Whether to skip any attach operation altogether for RBD PVCs. See more details
559 # [here](https://kubernetes-csi.github.io/docs/skip-attach.html#skip-attach-with-csi-driver-object).
560 # If set to false it skips the volume attachments and makes the creation of pods using the RBD PVC fast.
561 # **WARNING** It's highly discouraged to use this for RWO volumes as it can cause data corruption.
562 # csi-addons operations like Reclaimspace and PVC Keyrotation will also not be supported if set
563 # to false since we'll have no VolumeAttachments to determine which node the PVC is mounted on.
564 # Refer to this [issue](https://github.com/kubernetes/kubernetes/issues/103305) for more details.
565 rbdAttachRequired: true
566 # -- Whether to skip any attach operation altogether for NFS PVCs. See more details
567 # [here](https://kubernetes-csi.github.io/docs/skip-attach.html#skip-attach-with-csi-driver-object).
568 # If cephFSAttachRequired is set to false it skips the volume attachments and makes the creation
569 # of pods using the NFS PVC fast. **WARNING** It's highly discouraged to use this for
570 # NFS RWO volumes. Refer to this [issue](https://github.com/kubernetes/kubernetes/issues/103305) for more details.
571 nfsAttachRequired: true
572
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000573# -- Enable discovery daemon
okozachenko120323147262023-01-28 04:16:42 +1100574enableDiscoveryDaemon: false
Mohammed Naser65cda132024-05-02 14:34:08 -0400575# -- Set the discovery daemon device discovery interval (default to 60m)
576discoveryDaemonInterval: 60m
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000577
578# -- The timeout for ceph commands in seconds
okozachenko120323147262023-01-28 04:16:42 +1100579cephCommandsTimeoutSeconds: "15"
580
Mohammed Naser65cda132024-05-02 14:34:08 -0400581# -- If true, run rook operator on the host network
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000582useOperatorHostNetwork:
okozachenko120323147262023-01-28 04:16:42 +1100583
Mohammed Naser65cda132024-05-02 14:34:08 -0400584# -- If true, scale down the rook operator.
585# This is useful for administrative actions where the rook operator must be scaled down, while using gitops style tooling
586# to deploy your helm charts.
587scaleDownOperator: false
588
okozachenko120323147262023-01-28 04:16:42 +1100589## Rook Discover configuration
590## toleration: NoSchedule, PreferNoSchedule or NoExecute
591## tolerationKey: Set this to the specific key of the taint to tolerate
592## tolerations: Array of tolerations in YAML format which will be added to agent deployment
593## nodeAffinity: Set to labels of the node to match
okozachenko120323147262023-01-28 04:16:42 +1100594
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000595discover:
596 # -- Toleration for the discover pods.
597 # Options: `NoSchedule`, `PreferNoSchedule` or `NoExecute`
598 toleration:
599 # -- The specific key of the taint to tolerate
600 tolerationKey:
601 # -- Array of tolerations in YAML format which will be added to discover deployment
602 tolerations:
603 # - key: key
604 # operator: Exists
605 # effect: NoSchedule
606 # -- The node labels for affinity of `discover-agent` [^1]
Mohammed Naser65cda132024-05-02 14:34:08 -0400607 nodeAffinity:
608 # key1=value1,value2; key2=value3
609 #
610 # or
611 #
612 # requiredDuringSchedulingIgnoredDuringExecution:
613 # nodeSelectorTerms:
614 # - matchExpressions:
615 # - key: storage-node
616 # operator: Exists
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000617 # -- Labels to add to the discover pods
618 podLabels: # "key1=value1,key2=value2"
619 # -- Add resources to discover daemon pods
620 resources:
621 # - limits:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000622 # memory: 512Mi
623 # - requests:
624 # cpu: 100m
625 # memory: 128Mi
okozachenko120323147262023-01-28 04:16:42 +1100626
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000627# -- Runs Ceph Pods as privileged to be able to write to `hostPaths` in OpenShift with SELinux restrictions.
okozachenko120323147262023-01-28 04:16:42 +1100628hostpathRequiresPrivileged: false
629
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000630# -- Disable automatic orchestration when new devices are discovered.
okozachenko120323147262023-01-28 04:16:42 +1100631disableDeviceHotplug: false
632
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000633# -- Blacklist certain disks according to the regex provided.
okozachenko120323147262023-01-28 04:16:42 +1100634discoverDaemonUdev:
635
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000636# -- imagePullSecrets option allow to pull docker images from private docker registry. Option will be passed to all service accounts.
637imagePullSecrets:
okozachenko120323147262023-01-28 04:16:42 +1100638# - name: my-registry-secret
639
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000640# -- Whether the OBC provisioner should watch on the operator namespace or not, if not the namespace of the cluster will be used
okozachenko120323147262023-01-28 04:16:42 +1100641enableOBCWatchOperatorNamespace: true
642
Mohammed Naser65cda132024-05-02 14:34:08 -0400643# -- Specify the prefix for the OBC provisioner in place of the cluster namespace
644# @default -- `ceph cluster namespace`
645obcProvisionerNamePrefix:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000646
okozachenko120323147262023-01-28 04:16:42 +1100647monitoring:
Mohammed Naserfc4a62c2023-02-10 02:59:17 +0000648 # -- Enable monitoring. Requires Prometheus to be pre-installed.
649 # Enabling will also create RBAC rules to allow Operator to create ServiceMonitors
okozachenko120323147262023-01-28 04:16:42 +1100650 enabled: false