@@ -219,10 +219,10 @@ data:
219
219
- key: node.cloudprovider.kubernetes.io/uninitialized
220
220
value: "true"
221
221
effect: NoSchedule
222
- - key: node-role.kubernetes.io/master
222
+ - key: node-role.kubernetes.io/control-plane
223
223
operator: Exists
224
224
effect: NoSchedule
225
- - key: node-role.kubernetes.io/control-plane
225
+ - key: node-role.kubernetes.io/master
226
226
operator: Exists
227
227
effect: NoSchedule
228
228
volumes:
@@ -234,12 +234,13 @@ data:
234
234
path: /etc/kubernetes
235
235
containers:
236
236
- name: oci-cloud-controller-manager
237
- image: ghcr.io/oracle/cloud-provider-oci:v1.26 .0
237
+ image: ghcr.io/oracle/cloud-provider-oci:v1.28 .0
238
238
command: ["/usr/local/bin/oci-cloud-controller-manager"]
239
239
args:
240
240
- --cloud-config=/etc/oci/cloud-provider.yaml
241
241
- --cloud-provider=oci
242
- - --leader-elect-resource-lock=configmapsleases
242
+ - --leader-elect-resource-lock=leases
243
+ - --concurrent-service-syncs=3
243
244
- --v=2
244
245
volumeMounts:
245
246
- name: cfg
@@ -284,7 +285,7 @@ data:
284
285
- list
285
286
- watch
286
287
- patch
287
-
288
+ - get
288
289
- apiGroups:
289
290
- ""
290
291
resources:
@@ -380,6 +381,9 @@ data:
380
381
- serviceaccounts
381
382
verbs:
382
383
- create
384
+ - list
385
+ - get
386
+ - watch
383
387
- apiGroups:
384
388
- ""
385
389
resources:
@@ -465,7 +469,7 @@ data:
465
469
node-role.kubernetes.io/control-plane: ""
466
470
containers:
467
471
- name: csi-volume-provisioner
468
- image: registry.k8s.io/sig-storage/csi-provisioner:v3.5 .0
472
+ image: registry.k8s.io/sig-storage/csi-provisioner:v3.6 .0
469
473
args:
470
474
- --csi-address=/var/run/shared-tmpfs/csi.sock
471
475
- --volume-name-prefix=csi
@@ -480,7 +484,7 @@ data:
480
484
- mountPath: /var/run/shared-tmpfs
481
485
name: shared-tmpfs
482
486
- name: csi-fss-volume-provisioner
483
- image: registry.k8s.io/sig-storage/csi-provisioner:v3.5 .0
487
+ image: registry.k8s.io/sig-storage/csi-provisioner:v3.6 .0
484
488
args:
485
489
- --csi-address=/var/run/shared-tmpfs/csi-fss.sock
486
490
- --volume-name-prefix=csi-fss
@@ -495,7 +499,7 @@ data:
495
499
- mountPath: /var/run/shared-tmpfs
496
500
name: shared-tmpfs
497
501
- name: csi-attacher
498
- image: k8s.gcr. io/sig-storage/csi-attacher:v4.2 .0
502
+ image: registry. k8s.io/sig-storage/csi-attacher:v4.4 .0
499
503
args:
500
504
- --csi-address=/var/run/shared-tmpfs/csi.sock
501
505
- --timeout=120s
@@ -508,7 +512,24 @@ data:
508
512
- mountPath: /var/run/shared-tmpfs
509
513
name: shared-tmpfs
510
514
- name: csi-resizer
511
- image: k8s.gcr.io/sig-storage/csi-resizer:v1.7.0
515
+ image: registry.k8s.io/sig-storage/csi-resizer:v1.9.0
516
+ args:
517
+ - --csi-address=/var/run/shared-tmpfs/csi.sock
518
+ - --leader-election
519
+ imagePullPolicy: "IfNotPresent"
520
+ volumeMounts:
521
+ - mountPath: /var/run/shared-tmpfs
522
+ name: shared-tmpfs
523
+ - name: snapshot-controller
524
+ image: registry.k8s.io/sig-storage/snapshot-controller:v6.2.0
525
+ args:
526
+ - --leader-election
527
+ imagePullPolicy: "IfNotPresent"
528
+ volumeMounts:
529
+ - mountPath: /var/run/shared-tmpfs
530
+ name: shared-tmpfs
531
+ - name: csi-snapshotter
532
+ image: registry.k8s.io/sig-storage/csi-snapshotter:v6.2.0
512
533
args:
513
534
- --csi-address=/var/run/shared-tmpfs/csi.sock
514
535
- --leader-election
@@ -522,7 +543,7 @@ data:
522
543
- --fss-csi-endpoint=unix://var/run/shared-tmpfs/csi-fss.sock
523
544
command:
524
545
- /usr/local/bin/oci-csi-controller-driver
525
- image: ghcr.io/oracle/cloud-provider-oci:v1.26 .0
546
+ image: ghcr.io/oracle/cloud-provider-oci:v1.28 .0
526
547
imagePullPolicy: IfNotPresent
527
548
volumeMounts:
528
549
- name: config
@@ -673,7 +694,7 @@ data:
673
694
fieldPath: spec.nodeName
674
695
- name: PATH
675
696
value: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/host/usr/bin:/host/sbin
676
- image: ghcr.io/oracle/cloud-provider-oci:v1.26 .0
697
+ image: ghcr.io/oracle/cloud-provider-oci:v1.28 .0
677
698
securityContext:
678
699
privileged: true
679
700
volumeMounts:
@@ -687,6 +708,7 @@ data:
687
708
- mountPath: /dev
688
709
name: device-dir
689
710
- mountPath: /host
711
+ mountPropagation: HostToContainer
690
712
name: host-root
691
713
- mountPath: /sbin/iscsiadm
692
714
name: chroot-iscsiadm
@@ -707,7 +729,7 @@ data:
707
729
args:
708
730
- --csi-address=/csi/csi.sock
709
731
- --kubelet-registration-path=/var/lib/kubelet/plugins/blockvolume.csi.oraclecloud.com/csi.sock
710
- image: k8s.gcr .io/sig-storage/csi-node-driver-registrar:v2.5.1
732
+ image: registry.k8s .io/sig-storage/csi-node-driver-registrar:v2.5.1
711
733
securityContext:
712
734
privileged: true
713
735
lifecycle:
@@ -726,7 +748,7 @@ data:
726
748
args:
727
749
- --csi-address=/fss/csi.sock
728
750
- --kubelet-registration-path=/var/lib/kubelet/plugins/fss.csi.oraclecloud.com/csi.sock
729
- image: k8s.gcr .io/sig-storage/csi-node-driver-registrar:v2.5.0
751
+ image: registry.k8s .io/sig-storage/csi-node-driver-registrar:v2.5.0
730
752
securityContext:
731
753
privileged: true
732
754
lifecycle:
@@ -805,65 +827,65 @@ data:
805
827
name: csi-oci
806
828
namespace: kube-system
807
829
rules:
808
- - apiGroups: [""]
809
- resources: ["events"]
810
- verbs: ["get", "list", "watch", "create", "update", "patch"]
811
- - apiGroups: [""]
812
- resources: ["nodes"]
813
- verbs: ["get", "list", "watch"]
814
- - apiGroups: ["volume.oci.oracle.com"]
815
- resources: ["blockscsiinfos"]
816
- verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
817
- - apiGroups: [""]
818
- resources: ["persistentvolumes"]
819
- verbs: ["get", "list", "watch", "create", "delete", "patch"]
820
- - apiGroups: [""]
821
- resources: ["persistentvolumeclaims"]
822
- verbs: ["get", "list", "watch", "update", "create"]
823
- - apiGroups: ["storage.k8s.io"]
824
- resources: ["storageclasses", "volumeattachments", "volumeattachments/status", "csinodes"]
825
- verbs: ["get", "list", "watch", "patch"]
826
- - apiGroups: ["coordination.k8s.io"]
827
- resources: ["leases"]
828
- verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
829
- - apiGroups: [""]
830
- resources: ["endpoints"]
831
- verbs: ["get", "watch", "create", "update"]
832
- - apiGroups: [""]
833
- resources: ["pods"]
834
- verbs: ["get", "list", "watch"]
835
- - apiGroups: [""]
836
- resources: ["persistentvolumeclaims/status"]
837
- verbs: ["patch"]
838
- - apiGroups: [ "snapshot.storage.k8s.io" ]
839
- resources: [ "volumesnapshotclasses" ]
840
- verbs: [ "get", "list", "watch" ]
841
- - apiGroups: [ "snapshot.storage.k8s.io" ]
842
- resources: [ "volumesnapshotcontents" ]
843
- verbs: [ "create", "get", "list", "watch", "update", "delete", "patch" ]
844
- - apiGroups: [ "snapshot.storage.k8s.io" ]
845
- resources: [ "volumesnapshotcontents/status" ]
846
- verbs: [ "update", "patch" ]
847
- - apiGroups: [ "snapshot.storage.k8s.io" ]
848
- resources: [ "volumesnapshots" ]
849
- verbs: [ "get", "list", "watch", "update", "patch" ]
850
- - apiGroups: [ "snapshot.storage.k8s.io" ]
851
- resources: [ "volumesnapshots/status" ]
852
- verbs: [ "update", "patch" ]
830
+ - apiGroups: [""]
831
+ resources: ["events"]
832
+ verbs: ["get", "list", "watch", "create", "update", "patch"]
833
+ - apiGroups: [""]
834
+ resources: ["nodes"]
835
+ verbs: ["get", "list", "watch"]
836
+ - apiGroups: ["volume.oci.oracle.com"]
837
+ resources: ["blockscsiinfos"]
838
+ verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
839
+ - apiGroups: [""]
840
+ resources: ["persistentvolumes"]
841
+ verbs: ["get", "list", "watch", "create", "delete", "patch"]
842
+ - apiGroups: [""]
843
+ resources: ["persistentvolumeclaims"]
844
+ verbs: ["get", "list", "watch", "update", "create"]
845
+ - apiGroups: ["storage.k8s.io"]
846
+ resources: ["storageclasses", "volumeattachments", "volumeattachments/status", "csinodes"]
847
+ verbs: ["get", "list", "watch", "patch"]
848
+ - apiGroups: ["coordination.k8s.io"]
849
+ resources: ["leases"]
850
+ verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
851
+ - apiGroups: [""]
852
+ resources: ["endpoints"]
853
+ verbs: ["get", "watch", "create", "update"]
854
+ - apiGroups: [""]
855
+ resources: ["pods"]
856
+ verbs: ["get", "list", "watch"]
857
+ - apiGroups: [""]
858
+ resources: ["persistentvolumeclaims/status"]
859
+ verbs: ["patch"]
860
+ - apiGroups: [ "snapshot.storage.k8s.io" ]
861
+ resources: [ "volumesnapshotclasses" ]
862
+ verbs: [ "get", "list", "watch" ]
863
+ - apiGroups: [ "snapshot.storage.k8s.io" ]
864
+ resources: [ "volumesnapshotcontents" ]
865
+ verbs: [ "create", "get", "list", "watch", "update", "delete", "patch" ]
866
+ - apiGroups: [ "snapshot.storage.k8s.io" ]
867
+ resources: [ "volumesnapshotcontents/status" ]
868
+ verbs: [ "update", "patch" ]
869
+ - apiGroups: [ "snapshot.storage.k8s.io" ]
870
+ resources: [ "volumesnapshots" ]
871
+ verbs: [ "get", "list", "watch", "update", "patch" ]
872
+ - apiGroups: [ "snapshot.storage.k8s.io" ]
873
+ resources: [ "volumesnapshots/status" ]
874
+ verbs: [ "update", "patch" ]
853
875
---
854
876
855
877
kind: ClusterRoleBinding
856
878
apiVersion: rbac.authorization.k8s.io/v1
857
879
metadata:
858
- name: csi-oci-binding
880
+ name: csi-oci-binding
859
881
subjects:
860
- - kind: ServiceAccount
861
- name: csi-oci-node-sa
862
- namespace: kube-system
882
+ - kind: ServiceAccount
883
+ name: csi-oci-node-sa
884
+ namespace: kube-system
863
885
roleRef:
864
- kind: ClusterRole
865
- name: csi-oci
866
- apiGroup: rbac.authorization.k8s.io
886
+ kind: ClusterRole
887
+ name: csi-oci
888
+ apiGroup: rbac.authorization.k8s.io
867
889
---
868
890
kind: StorageClass
869
891
apiVersion: storage.k8s.io/v1
0 commit comments