Plugin mostly working, pending update to the CSI itself

Author: philproctor

.gitignore

@@ -1 +1,2 @@
 debug.yml
+debug-vals.yml

Chart.yaml

@@ -3,5 +3,5 @@ name: zed-csi
 description: A Helm chart for Kubernetes
 
 type: application
-version: 0.1.0
-appVersion: "v0.0.1alpha5"
+version: "0.0.1-alpha5"
+appVersion: "v0.0.1-alpha5"

debug.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+CMD=$1
+
+if [[ $CMD == 'install' ]]; then
+    helm install -f debug-vals.yml -n csi zed-csi-debug .
+elif [[ $CMD == 'uninstall' ]]; then
+    helm uninstall -n csi zed-csi-debug
+fi

templates/clusterrole.yaml

@@ -1,4 +1,5 @@
 {{- if .Values.clusterRole.create -}}
+
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
@@ -60,6 +61,7 @@ metadata:
 subjects:
   - kind: ServiceAccount
     name: {{ include "zed-csi.serviceAccountName" . }}
+    namespace: '{{ .Release.Namespace }}'
 roleRef:
   kind: ClusterRole
   name: {{ include "zed-csi.clusterRoleName" . }}

templates/configmap.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "zed-csi.fullname" . }}
+  labels:
+    {{- include "zed-csi.labels" . | nindent 4 }}
+data:
+  {{- with .Values.config }}
+  zed-csi.yml: |
+    {{- toYaml . | nindent 4 }}
+  {{- end }}

templates/daemonset.yaml

@@ -26,7 +26,27 @@ spec:
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers:
-        - name: {{ .Chart.Name }}
+        - name: csi-node-driver-registrar
+          image: ghcr.io/homelab-library/csi-node-driver-registrar:2.0.1
+          args:
+            - '--v=5'
+            - '--csi-address=$(ADDRESS)'
+            - '--kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)'
+          env:
+            - name: ADDRESS
+              value: /plugin/csi.sock
+            - name: DRIVER_REG_SOCK_PATH
+              value: /var/lib/kubelet/plugins_registry/zed-csi/csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          volumeMounts:
+            - name: plugin-dir
+              mountPath: /plugin
+            - name: registration-dir
+              mountPath: /registration
+        - name: zed-csi-driver
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
@@ -37,6 +57,31 @@ spec:
               protocol: TCP
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
+          volumeMounts:
+            - name: plugin-dir
+              mountPath: /plugin
+            - name: pods-mount-dir
+              mountPath: /var/lib/kubelet/pods
+              mountPropagation: 'Bidirectional'
+            - name: zed-csi-yml
+              mountPath: /etc/zed-csi.yml
+              subPath: zed-csi.yml
+      volumes:
+        - name: plugin-dir
+          hostPath:
+            path: /var/lib/kubelet/plugins_registry/zed-csi
+            type: DirectoryOrCreate
+        - name: registration-dir
+          hostPath:
+            path: /var/lib/kubelet/plugins_registry/
+            type: Directory
+        - name: pods-mount-dir
+          hostPath:
+            path: /var/lib/kubelet/pods
+            type: Directory
+        - name: zed-csi-yml
+          configMap:
+            name: {{ include "zed-csi.fullname" . }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}

values.yaml

@@ -5,11 +5,11 @@ image:
   repository: ghcr.io/zed-csi/zed-csi
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: ""
+  tag: ''
 
 imagePullSecrets: []
-nameOverride: ""
-fullnameOverride: ""
+nameOverride: ''
+fullnameOverride: ''
 
 serviceAccount:
   # Specifies whether a service account should be created
@@ -18,7 +18,7 @@ serviceAccount:
   annotations: {}
   # The name of the service account to use.
   # If not set and create is true, a name is generated using the fullname template
-  name: ""
+  name: ''
 
 clusterRole:
   # Specifies whether a service account should be created
@@ -27,26 +27,26 @@ clusterRole:
   annotations: {}
   # The name of the service account to use.
   # If not set and create is true, a name is generated using the fullname template
-  name: ""
+  name: ''
 
 podAnnotations: {}
 
-podSecurityContext: {}
+podSecurityContext:
+  {}
   # fsGroup: 2000
 
-securityContext: {}
+securityContext:
+  privileged: true
+  allowPrivilegeEscalation: true
   # capabilities:
   #   drop:
   #   - ALL
   # readOnlyRootFilesystem: true
   # runAsNonRoot: true
   # runAsUser: 1000
 
-service:
-  type: ClusterIP
-  port: 80
-
-resources: {}
+resources:
+  {}
   # limits:
   #   cpu: 100m
   #   memory: 128Mi
@@ -59,3 +59,40 @@ nodeSelector: {}
 tolerations: []
 
 affinity: {}
+
+config:
+  node:
+    initiator_iqn_mode:
+      type: detect
+    control_mode:
+      type: local
+      sudo: true
+
+  controller:
+    control_mode:
+      type: ssh
+      sudo: true
+      user: 'user'
+      host: 'host'
+      port: 22
+      # private_key: ''
+
+  driver:
+    name: zfs-csi
+    reclaim_policy: retain
+    storage_class: 'iscsi'
+    default_class: false
+
+  iscsi:
+    # base_iqn: ''
+    target_portal: '127.0.0.1'
+    attributes:
+      authentication: '0'
+      demo_mode_write_protect: '0'
+      generate_node_acls: '1'
+      cache_dynamic_acls: '1'
+
+  zfs:
+    parent_dataset: 'tank/csi/'
+    attributes:
+      compression: lz4