mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-12-18 11:00:25 +00:00
b9cd0e18ad
This is a part of the stateless set of commits for CephCSI. This commit removes the dependency on config maps to store cephFS provisioned volumes, and instead relies on RADOS based objects and keys, and required CSI VolumeID encoding to detect the provisioned volumes. Changes: - Provide backward compatibility to provisioned volumes by older plugin versions (1.0.0 or older) - Remove Create/Delete support for statically provisioned volumes (fixes #382) - Added namespace support to RADOS OMaps and used the same to store RADOS CSI objects and keys in the CephFS metadata pool - Added support to mention fsname for CephFS provisioning (fixes #359) - Changed field name in CSI Identifier to 'location', to denote a pool or fscid - Updated mounter cache to use new scheme - Required Helm manifests are updated - Required documentation and other manifests are updated - Made driver option 'metadatastorage' as optional, as fresh installs do not need to specify the same Testing done: - Create/Mount/Delete PVC - Create/Delete 5 PVCs - Mount version 1.0.0 PVC - Delete version 1.0.0 PV - Mount Statically defined PV/PVC/Pod - Mount Statically defined version 1.0.0 PV/PVC/Pod - Delete Statically defined version 1.0.0 PV/PVC/Pod - Node restart when mounted to test mountcache - Use InstanceID other than 'default' - RBD basic round of tests, as namespace is added to OMaps - csitest against ceph-fs plugin - NOTE: CephFS plugin still does not detect and address already created volumes but of a different size - Test not providing any value to the metadata storage parameter Signed-off-by: ShyamsundarR <srangana@redhat.com>
112 lines
2.9 KiB
Go
112 lines
2.9 KiB
Go
/*
|
|
Copyright 2018 The Ceph-CSI Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package cephfs
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/ceph/ceph-csi/pkg/util"
|
|
)
|
|
|
|
const (
|
|
cephUserPrefix = "user-"
|
|
cephEntityClientPrefix = "client."
|
|
)
|
|
|
|
type cephEntityCaps struct {
|
|
Mds string `json:"mds"`
|
|
Mon string `json:"mon"`
|
|
Osd string `json:"osd"`
|
|
}
|
|
|
|
type cephEntity struct {
|
|
Entity string `json:"entity"`
|
|
Key string `json:"key"`
|
|
Caps cephEntityCaps `json:"caps"`
|
|
}
|
|
|
|
func (ent *cephEntity) toCredentials() *credentials {
|
|
return &credentials{
|
|
id: ent.Entity[len(cephEntityClientPrefix):],
|
|
key: ent.Key,
|
|
}
|
|
}
|
|
|
|
func getCephUserName(volID volumeID) string {
|
|
return cephUserPrefix + string(volID)
|
|
}
|
|
|
|
func getSingleCephEntity(args ...string) (*cephEntity, error) {
|
|
var ents []cephEntity
|
|
if err := execCommandJSON(&ents, "ceph", args...); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if len(ents) != 1 {
|
|
return nil, fmt.Errorf("got unexpected number of entities: expected 1, got %d", len(ents))
|
|
}
|
|
|
|
return &ents[0], nil
|
|
}
|
|
|
|
func genUserIDs(adminCr *credentials, volID volumeID) (adminID, userID string) {
|
|
return cephEntityClientPrefix + adminCr.id, cephEntityClientPrefix + getCephUserName(volID)
|
|
}
|
|
|
|
func getCephUser(volOptions *volumeOptions, adminCr *credentials, volID volumeID) (*cephEntity, error) {
|
|
adminID, userID := genUserIDs(adminCr, volID)
|
|
|
|
return getSingleCephEntity(
|
|
"-m", volOptions.Monitors,
|
|
"-n", adminID,
|
|
"--key="+adminCr.key,
|
|
"-c", util.CephConfigPath,
|
|
"-f", "json",
|
|
"auth", "get", userID,
|
|
)
|
|
}
|
|
|
|
func createCephUser(volOptions *volumeOptions, adminCr *credentials, volID volumeID) (*cephEntity, error) {
|
|
adminID, userID := genUserIDs(adminCr, volID)
|
|
|
|
return getSingleCephEntity(
|
|
"-m", volOptions.Monitors,
|
|
"-n", adminID,
|
|
"--key="+adminCr.key,
|
|
"-c", util.CephConfigPath,
|
|
"-f", "json",
|
|
"auth", "get-or-create", userID,
|
|
// User capabilities
|
|
"mds", fmt.Sprintf("allow rw path=%s", getVolumeRootPathCeph(volID)),
|
|
"mon", "allow r",
|
|
"osd", fmt.Sprintf("allow rw pool=%s namespace=%s", volOptions.Pool, getVolumeNamespace(volID)),
|
|
)
|
|
}
|
|
|
|
func deleteCephUser(volOptions *volumeOptions, adminCr *credentials, volID volumeID) error {
|
|
adminID, userID := genUserIDs(adminCr, volID)
|
|
|
|
// TODO: Need to return success if userID is not found
|
|
return execCommandErr("ceph",
|
|
"-m", volOptions.Monitors,
|
|
"-n", adminID,
|
|
"--key="+adminCr.key,
|
|
"-c", util.CephConfigPath,
|
|
"auth", "rm", userID,
|
|
)
|
|
}
|