From 0bc8c31f9f23f04afd2205598209ab38afefa0ba Mon Sep 17 00:00:00 2001 From: Aaron Tye Date: Tue, 7 Nov 2023 10:59:46 -0500 Subject: [PATCH] [charts/powerscale] Powerscale driver images in one place (#313) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * PowerFlex v2.8.0 release (#250) * PowerFlex SDC updated (#251) * Centralized images * minor typo fixed (#258) * powerstore v2.8.0 & k8s 1.28 support (#262) * update auth to 1.8 (#271) * update auth to 1.8 Signed-off-by: arnchiequ-dell * Updating podmon to 1.7 Signed-off-by: arnchiequ-dell * Update Observability values file for Authorization sidecar image version --------- Signed-off-by: arnchiequ-dell Co-authored-by: Alik Saring * Adding CSI Powerstore driver’s effective pod security profile for supporting ephemeral volumes as part of Openshift 4.13 support (#261) Co-authored-by: Surya Gupta <109594002+suryagupta4@users.noreply.github.com> * removed externalAccess from powerflex manifests. (#283) * Revert "Adding CSI Powerstore driver’s effective pod security profile for supporting ephemeral volumes as part of Openshift 4.13 support (#261)" (#284) This reverts commit c1dd93b953980d99351488593b343c6903633768. * NFS ACL parameter removed (#289) * fix values --------- Signed-off-by: arnchiequ-dell Co-authored-by: KshitijaKakde <111420075+KshitijaKakde@users.noreply.github.com> Co-authored-by: coulof Co-authored-by: Rajshree Khare <69839943+khareRajshree@users.noreply.github.com> Co-authored-by: Surya Gupta <109594002+suryagupta4@users.noreply.github.com> Co-authored-by: aqu-dell <108017114+arnchiequ-dell@users.noreply.github.com> Co-authored-by: Alik Saring Co-authored-by: alankar-verma <125348121+alankar-verma@users.noreply.github.com> Co-authored-by: VamsiSiddu-7 <103578883+VamsiSiddu-7@users.noreply.github.com> --- charts/csi-isilon/templates/_helpers.tpl | 51 -------------- charts/csi-isilon/templates/controller.yaml | 22 +++--- charts/csi-isilon/templates/node.yaml | 10 +-- charts/csi-isilon/values.yaml | 75 +++++++++++---------- 4 files changed, 57 insertions(+), 101 deletions(-) diff --git a/charts/csi-isilon/templates/_helpers.tpl b/charts/csi-isilon/templates/_helpers.tpl index 0bf04fae..ecfe630d 100644 --- a/charts/csi-isilon/templates/_helpers.tpl +++ b/charts/csi-isilon/templates/_helpers.tpl @@ -1,54 +1,3 @@ -{{/* -Return the appropriate sidecar images based on k8s version -*/}} -{{- define "csi-isilon.attacherImage" -}} - {{- if eq .Capabilities.KubeVersion.Major "1" }} - {{- if and (ge (trimSuffix "+" .Capabilities.KubeVersion.Minor) "21") (le (trimSuffix "+" .Capabilities.KubeVersion.Minor) "28") -}} - {{- print "registry.k8s.io/sig-storage/csi-attacher:v4.3.0" -}} - {{- end -}} - {{- end -}} -{{- end -}} - -{{- define "csi-isilon.provisionerImage" -}} - {{- if eq .Capabilities.KubeVersion.Major "1" }} - {{- if and (ge (trimSuffix "+" .Capabilities.KubeVersion.Minor) "21") (le (trimSuffix "+" .Capabilities.KubeVersion.Minor) "28") -}} - {{- print "registry.k8s.io/sig-storage/csi-provisioner:v3.5.0" -}} - {{- end -}} - {{- end -}} -{{- end -}} - -{{- define "csi-isilon.snapshotterImage" -}} - {{- if eq .Capabilities.KubeVersion.Major "1" }} - {{- if and (ge (trimSuffix "+" .Capabilities.KubeVersion.Minor) "21") (le (trimSuffix "+" .Capabilities.KubeVersion.Minor) "28") -}} - {{- print "registry.k8s.io/sig-storage/csi-snapshotter:v6.2.2" -}} - {{- end -}} - {{- end -}} -{{- end -}} - -{{- define "csi-isilon.resizerImage" -}} - {{- if eq .Capabilities.KubeVersion.Major "1" }} - {{- if and (ge (trimSuffix "+" .Capabilities.KubeVersion.Minor) "21") (le (trimSuffix "+" .Capabilities.KubeVersion.Minor) "28") -}} - {{- print "registry.k8s.io/sig-storage/csi-resizer:v1.8.0" -}} - {{- end -}} - {{- end -}} -{{- end -}} - -{{- define "csi-isilon.registrarImage" -}} - {{- if eq .Capabilities.KubeVersion.Major "1" }} - {{- if and (ge (trimSuffix "+" .Capabilities.KubeVersion.Minor) "21") (le (trimSuffix "+" .Capabilities.KubeVersion.Minor) "28") -}} - {{- print "registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0" -}} - {{- end -}} - {{- end -}} -{{- end -}} - -{{- define "csi-isilon.healthmonitorImage" -}} - {{- if eq .Capabilities.KubeVersion.Major "1" }} - {{- if and (ge (trimSuffix "+" .Capabilities.KubeVersion.Minor) "21") (le (trimSuffix "+" .Capabilities.KubeVersion.Minor) "28") -}} - {{- print "registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.9.0" -}} - {{- end -}} - {{- end -}} -{{- end -}} - {{/* Return true if storage capacity tracking is enabled and is supported based on k8s version */}} diff --git a/charts/csi-isilon/templates/controller.yaml b/charts/csi-isilon/templates/controller.yaml index 4c8dc222..3c279baa 100644 --- a/charts/csi-isilon/templates/controller.yaml +++ b/charts/csi-isilon/templates/controller.yaml @@ -194,7 +194,7 @@ spec: {{- if hasKey .Values "podmon" }} {{- if eq .Values.podmon.enabled true }} - name: podmon - image: {{ required "Must provide the podmon container image." .Values.podmon.image }} + image: {{ required "Must provide the podmon container image." .Values.images.podmon }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: {{- toYaml .Values.podmon.controller.args | nindent 12 }} @@ -221,7 +221,7 @@ spec: {{- if hasKey .Values.controller "replication" }} {{- if eq .Values.controller.replication.enabled true}} - name: dell-csi-replicator - image: {{ required "Must provide the Dell CSI Replicator image." .Values.controller.replication.image}} + image: {{ required "Must provide the Dell CSI Replicator image." .Values.images.replication }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -248,7 +248,7 @@ spec: {{- if hasKey .Values.controller "resizer" }} {{- if eq .Values.controller.resizer.enabled true }} - name: resizer{{ $csiSidecarSuffix }} - image: {{ required "Must provide the CSI resizer container image." ( include "csi-isilon.resizerImage" . ) }} + image: {{ required "Must provide the CSI resizer container image." .Values.images.resizer }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -272,7 +272,7 @@ spec: {{ end }} {{ end }} - name: csi-metadata-retriever {{ $csiSidecarSuffix }} - image: {{ required "Must provide the CSI metadata retriever container image." .Values.controller.metadataretriever.image }} + image: {{ required "Must provide the CSI metadata retriever container image." .Values.images.metadataretriever }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -298,7 +298,7 @@ spec: - name: socket-dir mountPath: /var/run/csi - name: attacher{{ $csiSidecarSuffix }} - image: {{ required "Must provide the CSI attacher container image." ( include "csi-isilon.attacherImage" . ) }} + image: {{ required "Must provide the CSI attacher container image." .Values.images.attacher }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -323,7 +323,7 @@ spec: {{- if hasKey .Values.controller "healthMonitor" }} {{- if eq .Values.controller.healthMonitor.enabled true }} - name: external-health-monitor-controller - image: {{ required "Must provide the CSI external-health-monitor-controller container image." ( include "csi-isilon.healthmonitorImage" . ) }} + image: {{ required "Must provide the CSI external-health-monitor-controller container image." .Values.images.healthmonitor }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -351,7 +351,7 @@ spec: {{end}} {{- end }} - name: provisioner{{ $csiSidecarSuffix }} - image: {{ required "Must provide the CSI provisioner container image." ( include "csi-isilon.provisionerImage" . ) }} + image: {{ required "Must provide the CSI provisioner container image." .Values.images.provisioner }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -393,7 +393,7 @@ spec: {{- if eq .Values.controller.snapshot.enabled true }} - name: snapshotter{{ $csiSidecarSuffix }} #image: quay.io/k8scsi/csi-snapshotter:v1.0.0 - image: {{ required "Must provide the CSI snapshotter container image." ( include "csi-isilon.snapshotterImage" . ) }} + image: {{ required "Must provide the CSI snapshotter container image." .Values.images.snapshotter }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--csi-address={{ $driverSockPath }}" @@ -419,7 +419,7 @@ spec: {{end}} {{- if not $encrypted }} - name: driver - image: {{ required "Must provide the Isilon driver image repository." .Values.images.driverRepository }}/{{ .Chart.Name }}:{{ .Values.version }} + image: {{ required "Must provide the Isilon driver image repository." .Values.images.driver }} imagePullPolicy: {{ .Values.imagePullPolicy }} command: [ "/csi-isilon" ] args: @@ -519,7 +519,7 @@ spec: {{- if eq .Values.authorization.enabled true }} - name: karavi-authorization-proxy imagePullPolicy: {{ .Values.imagePullPolicy }} - image: {{ required "Must provide the authorization sidecar container image." .Values.authorization.sidecarProxyImage }} + image: {{ required "Must provide the authorization sidecar container image." .Values.images.authorization }} env: - name: PROXY_HOST value: "{{ .Values.authorization.proxyHost }}" @@ -549,7 +549,7 @@ spec: {{- end }} {{- if $encrypted }} - name: driver-sec - image: {{ .Values.encryption.image }} + image: {{ .Values.images.encryption }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - --name={{ .Values.encryption.pluginName }} diff --git a/charts/csi-isilon/templates/node.yaml b/charts/csi-isilon/templates/node.yaml index c08c2f92..d84a505a 100644 --- a/charts/csi-isilon/templates/node.yaml +++ b/charts/csi-isilon/templates/node.yaml @@ -113,7 +113,7 @@ spec: capabilities: add: ["SYS_ADMIN"] allowPrivilegeEscalation: true - image: {{ required "Must provide the podmon container image." .Values.podmon.image }} + image: {{ required "Must provide the podmon container image." .Values.images.podmon }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: {{- toYaml .Values.podmon.node.args | nindent 12 }} @@ -167,7 +167,7 @@ spec: capabilities: add: ["SYS_ADMIN"] allowPrivilegeEscalation: true - image: {{ required "Must provide the Isilon driver image repository." .Values.images.driverRepository }}/{{ .Chart.Name }}:{{ .Values.version }} + image: {{ required "Must provide the Isilon driver image repository." .Values.images.driver }} imagePullPolicy: {{ .Values.imagePullPolicy }} env: - name: CSI_ENDPOINT @@ -251,7 +251,7 @@ spec: mountPath: /csi-isilon-config-params {{- end }} - name: registrar{{ $csiSidecarSuffix }} - image: {{ required "Must provide the CSI node registrar container image." ( include "csi-isilon.registrarImage" . ) }} + image: {{ required "Must provide the CSI node registrar container image." .Values.images.registrar }} imagePullPolicy: {{ .Values.imagePullPolicy }} args: - "--v=5" @@ -273,7 +273,7 @@ spec: {{- if eq .Values.authorization.enabled true }} - name: karavi-authorization-proxy imagePullPolicy: {{ .Values.imagePullPolicy }} - image: {{ required "Must provide the authorization sidecar container image." .Values.authorization.sidecarProxyImage }} + image: {{ required "Must provide the authorization sidecar container image." .Values.images.authorization }} env: - name: PROXY_HOST value: "{{ .Values.authorization.proxyHost }}" @@ -303,7 +303,7 @@ spec: {{- end }} {{- if $encrypted }} - name: driver-sec - image: {{ .Values.encryption.image }} + image: {{ .Values.images.encryption }} imagePullPolicy: {{ .Values.imagePullPolicy }} securityContext: privileged: true diff --git a/charts/csi-isilon/values.yaml b/charts/csi-isilon/values.yaml index 59414b3c..7b250f72 100644 --- a/charts/csi-isilon/values.yaml +++ b/charts/csi-isilon/values.yaml @@ -4,6 +4,24 @@ # Note: Do not change this value version: "v2.8.0" +images: + # "driver" defines the container image, used for the driver container. + driver: dellemc/csi-isilon:v2.8.0 + # CSI sidecars + attacher: registry.k8s.io/sig-storage/csi-attacher:v4.3.0 + provisioner: registry.k8s.io/sig-storage/csi-provisioner:v3.5.0 + snapshotter: registry.k8s.io/sig-storage/csi-snapshotter:v6.2.2 + resizer: registry.k8s.io/sig-storage/csi-resizer:v1.8.0 + registrar: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0 + healthmonitor: registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.9.0 + + # CSM sidecars + replication: dellemc/dell-csi-replicator:v1.5.0 + podmon: dellemc/podmon:v1.6.0 + authorization: dellemc/csm-authorization-sidecar:v1.7.0 + metadataretriever: dellemc/csi-metadata-retriever:v1.4.0 + encryption: dellemc/csm-encryption:v0.3.0 + # CSI driver log level # Allowed values: "error", "warn"/"warning", "info", "debug" # Default value: "debug" @@ -110,10 +128,6 @@ controller: # Default value: 5s leaderElectionRetryPeriod: 5s - # Image for csi-metadata-retriever - metadataretriever: - image: dellemc/csi-metadata-retriever:v1.4.0 - # replication: allows to configure replication # Replication CRDs must be installed before installing driver replication: @@ -389,30 +403,29 @@ storageCapacity: # Enable this feature only after contact support for additional information podmon: enabled: false - image: dellemc/podmon:v1.7.0 - #controller: - # args: - # - "--csisock=unix:/var/run/csi/csi.sock" - # - "--labelvalue=csi-isilon" - # - "--arrayConnectivityPollRate=60" - # - "--driverPath=csi-isilon.dellemc.com" - # - "--mode=controller" - # - "--skipArrayConnectionValidation=false" - # - "--driver-config-params=/csi-isilon-config-params/driver-config-params.yaml" - # - "--driverPodLabelValue=dell-storage" - # - "--ignoreVolumelessPods=false" - - #node: - # args: - # - "--csisock=unix:/var/lib/kubelet/plugins/csi-isilon/csi_sock" - # - "--labelvalue=csi-isilon" - # - "--arrayConnectivityPollRate=60" - # - "--driverPath=csi-isilon.dellemc.com" - # - "--mode=node" - # - "--leaderelection=false" - # - "--driver-config-params=/csi-isilon-config-params/driver-config-params.yaml" - # - "--driverPodLabelValue=dell-storage" - # - "--ignoreVolumelessPods=false" + controller: + args: + - "--csisock=unix:/var/run/csi/csi.sock" + - "--labelvalue=csi-isilon" + - "--arrayConnectivityPollRate=60" + - "--driverPath=csi-isilon.dellemc.com" + - "--mode=controller" + - "--skipArrayConnectionValidation=false" + - "--driver-config-params=/csi-isilon-config-params/driver-config-params.yaml" + - "--driverPodLabelValue=dell-storage" + - "--ignoreVolumelessPods=false" + + node: + args: + - "--csisock=unix:/var/lib/kubelet/plugins/csi-isilon/csi_sock" + - "--labelvalue=csi-isilon" + - "--arrayConnectivityPollRate=60" + - "--driverPath=csi-isilon.dellemc.com" + - "--mode=node" + - "--leaderelection=false" + - "--driver-config-params=/csi-isilon-config-params/driver-config-params.yaml" + - "--driverPodLabelValue=dell-storage" + - "--ignoreVolumelessPods=false" encryption: # enabled: Enable/disable volume encryption feature. @@ -421,9 +434,6 @@ encryption: # pluginName: The name of the provisioner to use for encrypted volumes. pluginName: "sec-isilon.dellemc.com" - # image: Encryption driver image name. - image: "dellemc/csm-encryption:v0.3.0" - # apiPort: TCP port number used by the REST API server. apiPort: 3838 @@ -450,6 +460,3 @@ encryption: # See the gocryptfs documentation for more details. extraArgs: [] -images: - # "driver" defines the container image, used for the driver container. - driverRepository: dellemc