mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-22 14:20:19 +00:00
cc407d157e
this chart currently lack the ability to properly configure encryption, as well as granting sufficent permission to allow controllers to access secret when needed. Signed-off-by: Antoine C <hi@acolombier.dev>
68 lines
2.8 KiB
YAML
68 lines
2.8 KiB
YAML
{{- if .Values.storageClass.create -}}
|
|
apiVersion: storage.k8s.io/v1
|
|
kind: StorageClass
|
|
metadata:
|
|
name: {{ .Values.storageClass.name }}
|
|
{{- if .Values.storageClass.annotations }}
|
|
annotations:
|
|
{{ toYaml .Values.storageClass.annotations | indent 4 }}
|
|
{{- end }}
|
|
labels:
|
|
app: {{ include "ceph-csi-cephfs.name" . }}
|
|
chart: {{ include "ceph-csi-cephfs.chart" . }}
|
|
release: {{ .Release.Name }}
|
|
heritage: {{ .Release.Service }}
|
|
{{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
|
|
provisioner: {{ .Values.driverName }}
|
|
parameters:
|
|
clusterID: {{ .Values.storageClass.clusterID }}
|
|
fsName: {{ .Values.storageClass.fsName }}
|
|
{{- if .Values.storageClass.pool }}
|
|
pool: {{ .Values.storageClass.pool }}
|
|
{{- end }}
|
|
{{- if .Values.storageClass.encrypted }}
|
|
encrypted: "{{ .Values.storageClass.encrypted }}"
|
|
{{- end }}
|
|
{{- if .Values.storageClass.encryptionKMSID }}
|
|
encryptionKMSID: {{ .Values.storageClass.encryptionKMSID }}
|
|
{{- end }}
|
|
{{- if .Values.storageClass.fuseMountOptions }}
|
|
fuseMountOptions: "{{ .Values.storageClass.fuseMountOptions }}"
|
|
{{- end }}
|
|
{{- if .Values.storageClass.kernelMountOptions }}
|
|
kernelMountOptions: "{{ .Values.storageClass.kernelMountOptions }}"
|
|
{{- end }}
|
|
{{- if .Values.storageClass.mounter }}
|
|
mounter: "{{ .Values.storageClass.mounter }}"
|
|
{{- end }}
|
|
{{- if .Values.storageClass.volumeNamePrefix }}
|
|
volumeNamePrefix: "{{ .Values.storageClass.volumeNamePrefix }}"
|
|
{{- end }}
|
|
csi.storage.k8s.io/provisioner-secret-name: {{ .Values.storageClass.provisionerSecret }}
|
|
{{- if .Values.storageClass.provisionerSecretNamespace }}
|
|
csi.storage.k8s.io/provisioner-secret-namespace: {{ .Values.storageClass.provisionerSecretNamespace }}
|
|
{{ else }}
|
|
csi.storage.k8s.io/provisioner-secret-namespace: {{ .Release.Namespace }}
|
|
{{- end }}
|
|
csi.storage.k8s.io/controller-expand-secret-name: {{ .Values.storageClass.controllerExpandSecret }}
|
|
{{- if .Values.storageClass.controllerExpandSecretNamespace }}
|
|
csi.storage.k8s.io/controller-expand-secret-namespace: {{ .Values.storageClass.controllerExpandSecretNamespace }}
|
|
{{ else }}
|
|
csi.storage.k8s.io/controller-expand-secret-namespace: {{ .Release.Namespace }}
|
|
{{- end }}
|
|
csi.storage.k8s.io/node-stage-secret-name: {{ .Values.storageClass.nodeStageSecret }}
|
|
{{- if .Values.storageClass.nodeStageSecretNamespace }}
|
|
csi.storage.k8s.io/node-stage-secret-namespace: {{ .Values.storageClass.nodeStageSecretNamespace }}
|
|
{{ else }}
|
|
csi.storage.k8s.io/node-stage-secret-namespace: {{ .Release.Namespace }}
|
|
{{- end }}
|
|
reclaimPolicy: {{ .Values.storageClass.reclaimPolicy }}
|
|
allowVolumeExpansion: {{ .Values.storageClass.allowVolumeExpansion }}
|
|
{{- if .Values.storageClass.mountOptions }}
|
|
mountOptions:
|
|
{{- range .Values.storageClass.mountOptions }}
|
|
- {{ . }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end -}}
|