-
Notifications
You must be signed in to change notification settings - Fork 124
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
implement Ephemeral Inline Volumes support #198
Comments
cc @rajibmitra |
thank you @andyzhangx, looking at it. |
Issues go stale after 90d of inactivity. If this issue is safe to close now please do so with Send feedback to sig-contributor-experience at kubernetes/community. |
Stale issues rot after 30d of inactivity. If this issue is safe to close now please do so with Send feedback to sig-contributor-experience at kubernetes/community. |
/remove-lifecycle rotten |
The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle rotten |
any news? |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /close |
@k8s-triage-robot: Closing this issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/reopen I believe something like this could solve some problems for us. We want pods to be able to connect to existing, pre-allocated storage accounts on a CIFS/SMB or NFS server without having to pre-declare a PV and manage a PVC for each one. One question -- how would mount options like UID, GID, and authentication credentials be handled with an inline volume? I believe that the docs for inline say that mount options aren't supported. |
@GuyPaddock: You can't reopen an issue/PR unless you authored it or you are a collaborator. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
@andyzhangx would you consider re-opening? |
@GuyPaddock |
@GuyPaddock I re-evaluated this inline volume requirement, this would requires that pod could read any secret in same namespace (to get username and password), there is security risk to support such functionality. It would be ok for NFS driver since nfs does not use password auth, thus does not require reading secret. So we don't want to implement Ephemeral Inline Volumes support for this SMB driver, pls use PV/PVC way, it can also connect to existing, pre-allocated storage accounts.
BTW, are you referring Azure storage accounts? |
@andyzhangx Thank you for the context! That makes sense. We were using Azure Files but are now moving to Qumulo. |
@GuyPaddock do you have any suggestions why you are using Qumulo instead of Azure Files? thanks. |
The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle rotten |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /close |
@k8s-triage-robot: Closing this issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/remove-lifecycle stale |
/remove-lifecycle rotten |
I think this is still a valid use case. The same functionality was implemented optionally with the nfs csi driver. |
/reopen |
@kfox1111: Reopened this issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Hi @andyzhangx! Regarding reading secrets for username and password, would it deviate a lot from the current implementation? I know it currently reads from the secret provided in the storage class or PV. Would it be possible to use the same implementation only difference would be providing the secret through the pod inline?
|
csi.storage.k8s.io/node-stage-secret-namespace should be ignored in inline mode. only the pods namespace should be honored. |
Gotcha, I think that might actually simplify things. Was just looking at the implementation from azurefile inline volume example. |
aa61bfd0 Merge pull request kubernetes-csi#218 from xing-yang/update_csi_driver 7563d196 Update CSI_PROW_DRIVER_VERSION to v1.11.0 a2171bef Merge pull request kubernetes-csi#216 from msau42/process cb987826 Merge pull request kubernetes-csi#217 from msau42/owners a11216e4 add new reviewers and remove inactive reviewers dd986754 Add step for checking builds b66c0824 Merge pull request kubernetes-csi#214 from pohly/junit-fixes b9b6763b filter-junit.go: fix loss of testcases when parsing Ginkgo v2 JUnit d4277839 filter-junit.go: preserve system error log 38e11468 prow.sh: publish individual JUnit files as separate artifacts 78c0fb71 Merge pull request kubernetes-csi#208 from jsafrane/skip-selinux 36e433e2 Skip SELinux tests in CI by default 348d4a92 Merge pull request kubernetes-csi#207 from RaunakShah/reviewers 1efc2724 Merge pull request kubernetes-csi#206 from RaunakShah/update-prow 7d410d88 Changes to csi prow to run e2e tests in sidecars cfa5a75c Merge pull request kubernetes-csi#203 from humblec/test-vendor 4edd1d8a Add RaunakShah to CSI reviewers group 7ccc9594 release tools update to 1.19 d24254f6 Merge pull request kubernetes-csi#202 from xing-yang/kind_0.14.0 0faa3fc7 Update to Kind v0.14.0 images ef4e1b2b Merge pull request kubernetes-csi#201 from xing-yang/add_1.24_image 4ddce251 Add 1.24 Kind image 7fe51491 Merge pull request kubernetes-csi#200 from pohly/bump-kubernetes-version 70915a8e prow.sh: update snapshotter version 31a3f38b Merge pull request kubernetes-csi#199 from pohly/bump-kubernetes-version 7577454a prow.sh: bump Kubernetes to v1.22.0 d29a2e75 Merge pull request kubernetes-csi#198 from pohly/csi-test-5.0.0 41cb70d3 prow.sh: sanity testing with csi-test v5.0.0 c85a63fb Merge pull request kubernetes-csi#197 from pohly/fix-alpha-testing b86d8e94 support Kubernetes 1.25 + Ginkgo v2 ab0b0a3d Merge pull request kubernetes-csi#192 from andyzhangx/patch-1 7bbab24e Merge pull request kubernetes-csi#196 from humblec/non-alpha e51ff2cc introduce control variable for non alpha feature gate configuration ca19ef52 Merge pull request kubernetes-csi#195 from pohly/fix-alpha-testing 3948331e fix testing with latest Kubernetes e4dab7ff Merge pull request kubernetes-csi#194 from yselkowitz/registry-k8s-io 84a4d5a1 Move from k8s.gcr.io to registry.k8s.io 9a0260c5 fix boilerplate header 37d1104 Merge pull request kubernetes-csi#191 from pohly/go-1.18 db917f5 update to Go 1.18 git-subtree-dir: release-tools git-subtree-split: aa61bfd0c1a80460aba7cb0feddc8cdee03622a4
aa61bfd0 Merge pull request #218 from xing-yang/update_csi_driver 7563d196 Update CSI_PROW_DRIVER_VERSION to v1.11.0 a2171bef Merge pull request #216 from msau42/process cb987826 Merge pull request #217 from msau42/owners a11216e4 add new reviewers and remove inactive reviewers dd986754 Add step for checking builds b66c0824 Merge pull request #214 from pohly/junit-fixes b9b6763b filter-junit.go: fix loss of testcases when parsing Ginkgo v2 JUnit d4277839 filter-junit.go: preserve system error log 38e11468 prow.sh: publish individual JUnit files as separate artifacts 78c0fb71 Merge pull request #208 from jsafrane/skip-selinux 36e433e2 Skip SELinux tests in CI by default 348d4a92 Merge pull request #207 from RaunakShah/reviewers 1efc2724 Merge pull request #206 from RaunakShah/update-prow 7d410d88 Changes to csi prow to run e2e tests in sidecars cfa5a75c Merge pull request #203 from humblec/test-vendor 4edd1d8a Add RaunakShah to CSI reviewers group 7ccc9594 release tools update to 1.19 d24254f6 Merge pull request #202 from xing-yang/kind_0.14.0 0faa3fc7 Update to Kind v0.14.0 images ef4e1b2b Merge pull request #201 from xing-yang/add_1.24_image 4ddce251 Add 1.24 Kind image 7fe51491 Merge pull request #200 from pohly/bump-kubernetes-version 70915a8e prow.sh: update snapshotter version 31a3f38b Merge pull request #199 from pohly/bump-kubernetes-version 7577454a prow.sh: bump Kubernetes to v1.22.0 d29a2e75 Merge pull request #198 from pohly/csi-test-5.0.0 41cb70d3 prow.sh: sanity testing with csi-test v5.0.0 c85a63fb Merge pull request #197 from pohly/fix-alpha-testing b86d8e94 support Kubernetes 1.25 + Ginkgo v2 ab0b0a3d Merge pull request #192 from andyzhangx/patch-1 7bbab24e Merge pull request #196 from humblec/non-alpha e51ff2cc introduce control variable for non alpha feature gate configuration ca19ef52 Merge pull request #195 from pohly/fix-alpha-testing 3948331e fix testing with latest Kubernetes e4dab7ff Merge pull request #194 from yselkowitz/registry-k8s-io 84a4d5a1 Move from k8s.gcr.io to registry.k8s.io 9a0260c5 fix boilerplate header 37d1104 Merge pull request #191 from pohly/go-1.18 db917f5 update to Go 1.18 git-subtree-dir: release-tools git-subtree-split: aa61bfd0c1a80460aba7cb0feddc8cdee03622a4
The Kubernetes project currently lacks enough contributors to adequately respond to all issues. This bot triages un-triaged issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues. This bot triages un-triaged issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle rotten |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /close not-planned |
@k8s-triage-robot: Closing this issue, marking it as "Not Planned". In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Still useful |
Is your feature request related to a problem?/Why is this needed
Describe the solution you'd like in detail
refer to
https://kubernetes-csi.github.io/docs/ephemeral-local-volumes.html#which-feature-should-my-driver-support
Describe alternatives you've considered
Additional context
The text was updated successfully, but these errors were encountered: