Skip to content

Commit

Permalink
cephfs: allow modify fsGroupPolicy for csidriver
Browse files Browse the repository at this point in the history
allow to change value of fsGroupPolicy parameter for CSI Driver spec

Signed-off-by: maximus13th <[email protected]>
  • Loading branch information
maximus13th authored and mergify[bot] committed Jan 8, 2024
1 parent 0ec64b7 commit 51decb0
Show file tree
Hide file tree
Showing 2 changed files with 18 additions and 1 deletion.
2 changes: 1 addition & 1 deletion charts/ceph-csi-cephfs/templates/csidriver-crd.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,5 @@ metadata:
spec:
attachRequired: false
podInfoOnMount: false
fsGroupPolicy: File
fsGroupPolicy: {{ default "File" .Values.CSIDriver.fsGroupPolicy }}
seLinuxMount: true
17 changes: 17 additions & 0 deletions charts/ceph-csi-cephfs/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,23 @@ logLevel: 5
# sidecarLogLevel is the variable for Kubernetes sidecar container's log level
sidecarLogLevel: 1

# Set fsGroupPolicy for CSI Driver object spec
# https://kubernetes-csi.github.io/docs/support-fsgroup.html
# The following modes are supported:
# - None: Indicates that volumes will be mounted with no modifications, as the
# CSI volume driver does not support these operations.
# - File: Indicates that the CSI volume driver supports volume ownership and
# permission change via fsGroup, and Kubernetes may use fsGroup to change
# permissions and ownership of the volume to match user requested fsGroup in
# the pod's SecurityPolicy regardless of fstype or access mode.
# - ReadWriteOnceWithFSType: Indicates that volumes will be examined to
# determine if volume ownership and permissions should be modified to match
# the pod's security policy.
# Changes will only occur if the fsType is defined and the persistent volume's
# accessModes contains ReadWriteOnce.
CSIDriver:
fsGroupPolicy: "File"

nodeplugin:
name: nodeplugin
# if you are using ceph-fuse client set this value to OnDelete
Expand Down

0 comments on commit 51decb0

Please sign in to comment.