kind: DaemonSet apiVersion: apps/v1 metadata: name: {{ include "ceph-csi-rbd.nodeplugin.fullname" . }} namespace: {{ .Release.Namespace }} labels: app: {{ include "ceph-csi-rbd.name" . }} chart: {{ include "ceph-csi-rbd.chart" . }} component: {{ .Values.nodeplugin.name }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} spec: selector: matchLabels: app: {{ include "ceph-csi-rbd.name" . }} component: {{ .Values.nodeplugin.name }} release: {{ .Release.Name }} updateStrategy: type: OnDelete template: metadata: labels: app: {{ include "ceph-csi-rbd.name" . }} chart: {{ include "ceph-csi-rbd.chart" . }} component: {{ .Values.nodeplugin.name }} release: {{ .Release.Name }} heritage: {{ .Release.Service }} spec: serviceAccountName: {{ include "ceph-csi-rbd.serviceAccountName.nodeplugin" . }} hostNetwork: true hostPID: true # to use e.g. Rook orchestrated cluster, and mons' FQDN is # resolved through k8s service, set dns policy to cluster first dnsPolicy: ClusterFirstWithHostNet containers: - name: driver-registrar image: "{{ .Values.nodeplugin.registrar.image.repository }}:{{ .Values.nodeplugin.registrar.image.tag }}" args: - "--v=5" - "--csi-address=/csi/{{ .Values.socketFile }}" - "--kubelet-registration-path={{ .Values.socketDir }}/{{ .Values.socketFile }}" lifecycle: preStop: exec: command: [ "/bin/sh", "-c", 'rm -rf /registration/{{ .Values.driverName }} /registration/{{ .Values.driverName }}-reg.sock' ] env: - name: KUBE_NODE_NAME valueFrom: fieldRef: fieldPath: spec.nodeName imagePullPolicy: {{ .Values.nodeplugin.registrar.image.pullPolicy }} volumeMounts: - name: socket-dir mountPath: /csi - name: registration-dir mountPath: /registration resources: {{ toYaml .Values.nodeplugin.registrar.resources | indent 12 }} - name: csi-rbdplugin securityContext: privileged: true capabilities: add: ["SYS_ADMIN"] allowPrivilegeEscalation: true image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" args : - "--nodeid=$(NODE_ID)" - "--type=rbd" - "--nodeserver=true" - "--endpoint=$(CSI_ENDPOINT)" - "--v=5" - "--drivername=$(DRIVER_NAME)" - "--containerized=true" env: - name: DRIVER_NAME value: {{ .Values.driverName }} - name: NODE_ID valueFrom: fieldRef: fieldPath: spec.nodeName - name: CSI_ENDPOINT value: "unix:/{{ .Values.socketDir }}/{{ .Values.socketFile }}" imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} volumeMounts: - name: socket-dir mountPath: {{ .Values.socketDir }} - name: plugin-dir mountPath: {{ .Values.pluginDir }} mountPropagation: "Bidirectional" - name: mountpoint-dir mountPath: /var/lib/kubelet/pods mountPropagation: "Bidirectional" - mountPath: /dev name: host-dev - mountPath: /rootfs name: host-rootfs - mountPath: /sys name: host-sys - mountPath: /lib/modules name: lib-modules readOnly: true - name: ceph-csi-config mountPath: /etc/ceph-csi-config/ - name: keys-tmp-dir mountPath: /tmp/csi/keys resources: {{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} - name: liveness-prometheus image: "{{ .Values.nodeplugin.plugin.image.repository }}:{{ .Values.nodeplugin.plugin.image.tag }}" args: - "--type=liveness" - "--endpoint=$(CSI_ENDPOINT)" - "--livenessport=8080" - "--livenesspath=/metrics" - "--polltime=60s" - "--timeout=3s" imagePullPolicy: {{ .Values.nodeplugin.plugin.image.pullPolicy }} env: - name: CSI_ENDPOINT value: "unix:/{{ .Values.socketDir }}/{{ .Values.socketFile }}" - name: POD_IP valueFrom: fieldRef: fieldPath: status.podIP volumeMounts: - name: plugin-dir mountPath: {{ .Values.socketDir }} resources: {{ toYaml .Values.nodeplugin.plugin.resources | indent 12 }} volumes: - name: socket-dir hostPath: path: {{ .Values.socketDir }} type: DirectoryOrCreate - name: registration-dir hostPath: path: {{ .Values.registrationDir }} type: Directory - name: plugin-dir hostPath: path: {{ .Values.pluginDir }} type: Directory - name: mountpoint-dir hostPath: path: /var/lib/kubelet/pods type: DirectoryOrCreate - name: host-dev hostPath: path: /dev - name: host-rootfs hostPath: path: / - name: host-sys hostPath: path: /sys - name: lib-modules hostPath: path: /lib/modules - name: ceph-csi-config configMap: name: {{ .Values.configMapName | quote }} - name: keys-tmp-dir emptyDir: { medium: "Memory" } {{- if .Values.nodeplugin.affinity }} affinity: {{ toYaml .Values.nodeplugin.affinity . | indent 8 -}} {{- end -}} {{- if .Values.nodeplugin.nodeSelector }} nodeSelector: {{ toYaml .Values.nodeplugin.nodeSelector | indent 8 -}} {{- end -}} {{- if .Values.nodeplugin.tolerations }} tolerations: {{ toYaml .Values.nodeplugin.tolerations | indent 8 -}} {{- end -}}