Release longhorn v1.2.0-preview1
Signed-off-by: David Ko <dko@suse.com>
This commit is contained in:
David Ko
parent
25b409421f
commit
13dc719ebb
@ -1,7 +1,7 @@
|
||||
apiVersion: v1
|
||||
name: longhorn
|
||||
version: 1.1.1
|
||||
appVersion: v1.1.1
|
||||
version: 1.2.0-preview1
|
||||
appVersion: v1.2.0-preview1
|
||||
kubeVersion: ">=v1.16.0-r0"
|
||||
description: Longhorn is a distributed block storage system for Kubernetes.
|
||||
keywords:
|
||||
|
||||
@ -17,7 +17,7 @@ questions:
|
||||
label: Longhorn Manager Image Repository
|
||||
group: "Longhorn Images Settings"
|
||||
- variable: image.longhorn.manager.tag
|
||||
default: v1.1.1
|
||||
default: v1.2.0-preview1
|
||||
description: "Specify Longhorn Manager Image Tag"
|
||||
type: string
|
||||
label: Longhorn Manager Image Tag
|
||||
@ -29,7 +29,7 @@ questions:
|
||||
label: Longhorn Engine Image Repository
|
||||
group: "Longhorn Images Settings"
|
||||
- variable: image.longhorn.engine.tag
|
||||
default: v1.1.1
|
||||
default: v1.2.0-preview1
|
||||
description: "Specify Longhorn Engine Image Tag"
|
||||
type: string
|
||||
label: Longhorn Engine Image Tag
|
||||
@ -41,7 +41,7 @@ questions:
|
||||
label: Longhorn UI Image Repository
|
||||
group: "Longhorn Images Settings"
|
||||
- variable: image.longhorn.ui.tag
|
||||
default: v1.1.1
|
||||
default: v1.2.0-preview1
|
||||
description: "Specify Longhorn UI Image Tag"
|
||||
type: string
|
||||
label: Longhorn UI Image Tag
|
||||
@ -53,7 +53,7 @@ questions:
|
||||
label: Longhorn Instance Manager Image Repository
|
||||
group: "Longhorn Images Settings"
|
||||
- variable: image.longhorn.instanceManager.tag
|
||||
default: v1_20201216
|
||||
default: v1_20210731
|
||||
description: "Specify Longhorn Instance Manager Image Tag"
|
||||
type: string
|
||||
label: Longhorn Instance Manager Image Tag
|
||||
@ -77,7 +77,7 @@ questions:
|
||||
label: Longhorn Backing Image Manager Image Repository
|
||||
group: "Longhorn Images Settings"
|
||||
- variable: image.longhorn.backingImageManager.tag
|
||||
default: v1_20210422
|
||||
default: v2_20210809
|
||||
description: "Specify Longhorn Backing Image Manager Image Tag"
|
||||
type: string
|
||||
label: Longhorn Backing Image Manager Image Tag
|
||||
|
||||
@ -38,7 +38,8 @@ rules:
|
||||
resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
|
||||
"engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
|
||||
"sharemanagers", "sharemanagers/status", "backingimages", "backingimages/status",
|
||||
"backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status"]
|
||||
"backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status",
|
||||
"backuptargets", "backuptargets/status", "backupvolumes", "backupvolumes/status", "backups", "backups/status"]
|
||||
verbs: ["*"]
|
||||
- apiGroups: ["coordination.k8s.io"]
|
||||
resources: ["leases"]
|
||||
|
||||
@ -523,3 +523,152 @@ spec:
|
||||
- name: Age
|
||||
type: date
|
||||
jsonPath: .metadata.creationTimestamp
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: BackupTarget
|
||||
name: backuptargets.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: BackupTarget
|
||||
listKind: BackupTargetList
|
||||
plural: backuptargets
|
||||
shortNames:
|
||||
- lhbt
|
||||
singular: backuptarget
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: URL
|
||||
type: string
|
||||
description: The backup target URL
|
||||
jsonPath: .spec.backupTargetURL
|
||||
- name: Credential
|
||||
type: string
|
||||
description: The backup target credential secret
|
||||
jsonPath: .spec.credentialSecret
|
||||
- name: Interval
|
||||
type: string
|
||||
description: The backup target poll interval
|
||||
jsonPath: .spec.pollInterval
|
||||
- name: Available
|
||||
type: boolean
|
||||
description: Indicate whether the backup target is available or not
|
||||
jsonPath: .status.available
|
||||
- name: LastSyncedAt
|
||||
type: string
|
||||
description: The backup target last synced time
|
||||
jsonPath: .status.lastSyncedAt
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: BackupVolume
|
||||
name: backupvolumes.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: BackupVolume
|
||||
listKind: BackupVolumeList
|
||||
plural: backupvolumes
|
||||
shortNames:
|
||||
- lhbv
|
||||
singular: backupvolume
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: CreatedAt
|
||||
type: string
|
||||
description: The backup volume creation time
|
||||
jsonPath: .status.createdAt
|
||||
- name: LastBackupName
|
||||
type: string
|
||||
description: The backup volume last backup name
|
||||
jsonPath: .status.lastBackupName
|
||||
- name: LastBackupAt
|
||||
type: string
|
||||
description: The backup volume last backup time
|
||||
jsonPath: .status.lastBackupAt
|
||||
- name: LastSyncedAt
|
||||
type: string
|
||||
description: The backup volume last synced time
|
||||
jsonPath: .status.lastSyncedAt
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: Backup
|
||||
name: backups.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: Backup
|
||||
listKind: BackupList
|
||||
plural: backups
|
||||
shortNames:
|
||||
- lhb
|
||||
singular: backup
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: SnapshotName
|
||||
type: string
|
||||
description: The snapshot name
|
||||
jsonPath: .status.snapshotName
|
||||
- name: SnapshotSize
|
||||
type: string
|
||||
description: The snapshot size
|
||||
jsonPath: .status.size
|
||||
- name: SnapshotCreatedAt
|
||||
type: string
|
||||
description: The snapshot creation time
|
||||
jsonPath: .status.snapshotCreatedAt
|
||||
- name: LastSyncedAt
|
||||
type: string
|
||||
description: The backup last synced time
|
||||
jsonPath: .status.lastSyncedAt
|
||||
---
|
||||
@ -9,22 +9,22 @@ image:
|
||||
longhorn:
|
||||
engine:
|
||||
repository: longhornio/longhorn-engine
|
||||
tag: v1.1.1
|
||||
tag: v1.2.0-preview1
|
||||
manager:
|
||||
repository: longhornio/longhorn-manager
|
||||
tag: v1.1.1
|
||||
tag: v1.2.0-preview1
|
||||
ui:
|
||||
repository: longhornio/longhorn-ui
|
||||
tag: v1.1.1
|
||||
tag: v1.2.0-preview1
|
||||
instanceManager:
|
||||
repository: longhornio/longhorn-instance-manager
|
||||
tag: v1_20201216
|
||||
tag: v1_20210731
|
||||
shareManager:
|
||||
repository: longhornio/longhorn-share-manager
|
||||
tag: v1_20210416
|
||||
backingImageManager:
|
||||
repository: longhornio/backing-image-manager
|
||||
tag: v1_20210422
|
||||
tag: v2_20210809
|
||||
csi:
|
||||
attacher:
|
||||
repository: longhornio/csi-attacher
|
||||
|
||||
@ -35,6 +35,7 @@ spec:
|
||||
command: ["bash", "-c", "grep \"No export entries found\" /var/log/ganesha.log > /dev/null 2>&1 ; [ $? -ne 0 ]"]
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 4
|
||||
---
|
||||
kind: Service
|
||||
apiVersion: v1
|
||||
|
||||
@ -1,11 +1,11 @@
|
||||
longhornio/csi-attacher:v2.2.1-lh1
|
||||
longhornio/csi-attacher:v2.2.1-lh2
|
||||
longhornio/csi-node-driver-registrar:v1.2.0-lh1
|
||||
longhornio/csi-provisioner:v1.6.0-lh1
|
||||
longhornio/csi-resizer:v0.5.1-lh1
|
||||
longhornio/csi-snapshotter:v2.1.1-lh1
|
||||
longhornio/backing-image-manager:v1_20210422
|
||||
longhornio/longhorn-engine:v1.1.1
|
||||
longhornio/longhorn-instance-manager:v1_20201216
|
||||
longhornio/longhorn-manager:v1.1.1
|
||||
longhornio/csi-provisioner:v1.6.0-lh2
|
||||
longhornio/csi-resizer:v0.5.1-lh2
|
||||
longhornio/csi-snapshotter:v2.1.1-lh2
|
||||
longhornio/backing-image-manager:v2_20210809
|
||||
longhornio/longhorn-engine:v1.2.0-preview1
|
||||
longhornio/longhorn-instance-manager:v1_20210731
|
||||
longhornio/longhorn-manager:v1.2.0-preview1
|
||||
longhornio/longhorn-share-manager:v1_20210416
|
||||
longhornio/longhorn-ui:v1.1.1
|
||||
longhornio/longhorn-ui:v1.2.0-preview1
|
||||
|
||||
@ -48,7 +48,8 @@ rules:
|
||||
resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings",
|
||||
"engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status",
|
||||
"sharemanagers", "sharemanagers/status", "backingimages", "backingimages/status",
|
||||
"backingimagemanagers", "backingimagemanagers/status"]
|
||||
"backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status",
|
||||
"backuptargets", "backuptargets/status", "backupvolumes", "backupvolumes/status", "backups", "backups/status"]
|
||||
verbs: ["*"]
|
||||
- apiGroups: ["coordination.k8s.io"]
|
||||
resources: ["leases"]
|
||||
@ -545,6 +546,205 @@ spec:
|
||||
type: date
|
||||
jsonPath: .metadata.creationTimestamp
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: BackingImageDataSource
|
||||
name: backingimagedatasources.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: BackingImageDataSource
|
||||
listKind: BackingImageDataSourceList
|
||||
plural: backingimagedatasources
|
||||
shortNames:
|
||||
- lhbids
|
||||
singular: backingimagedatasource
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: State
|
||||
type: string
|
||||
description: The current state of the pod used to provisione the backing image file from source
|
||||
jsonPath: .status.currentState
|
||||
- name: SourceType
|
||||
type: string
|
||||
description: The data source type
|
||||
jsonPath: .spec.sourceType
|
||||
- name: Node
|
||||
type: string
|
||||
description: The node the backing image file will be prepared on
|
||||
jsonPath: .spec.nodeID
|
||||
- name: DiskUUID
|
||||
type: string
|
||||
description: The disk the backing image file will be prepared on
|
||||
jsonPath: .spec.diskUUID
|
||||
- name: Age
|
||||
type: date
|
||||
jsonPath: .metadata.creationTimestamp
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: BackupTarget
|
||||
name: backuptargets.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: BackupTarget
|
||||
listKind: BackupTargetList
|
||||
plural: backuptargets
|
||||
shortNames:
|
||||
- lhbt
|
||||
singular: backuptarget
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: URL
|
||||
type: string
|
||||
description: The backup target URL
|
||||
jsonPath: .spec.backupTargetURL
|
||||
- name: Credential
|
||||
type: string
|
||||
description: The backup target credential secret
|
||||
jsonPath: .spec.credentialSecret
|
||||
- name: Interval
|
||||
type: string
|
||||
description: The backup target poll interval
|
||||
jsonPath: .spec.pollInterval
|
||||
- name: Available
|
||||
type: boolean
|
||||
description: Indicate whether the backup target is available or not
|
||||
jsonPath: .status.available
|
||||
- name: LastSyncedAt
|
||||
type: string
|
||||
description: The backup target last synced time
|
||||
jsonPath: .status.lastSyncedAt
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: BackupVolume
|
||||
name: backupvolumes.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: BackupVolume
|
||||
listKind: BackupVolumeList
|
||||
plural: backupvolumes
|
||||
shortNames:
|
||||
- lhbv
|
||||
singular: backupvolume
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: CreatedAt
|
||||
type: string
|
||||
description: The backup volume creation time
|
||||
jsonPath: .status.createdAt
|
||||
- name: LastBackupName
|
||||
type: string
|
||||
description: The backup volume last backup name
|
||||
jsonPath: .status.lastBackupName
|
||||
- name: LastBackupAt
|
||||
type: string
|
||||
description: The backup volume last backup time
|
||||
jsonPath: .status.lastBackupAt
|
||||
- name: LastSyncedAt
|
||||
type: string
|
||||
description: The backup volume last synced time
|
||||
jsonPath: .status.lastSyncedAt
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
longhorn-manager: Backup
|
||||
name: backups.longhorn.io
|
||||
spec:
|
||||
group: longhorn.io
|
||||
names:
|
||||
kind: Backup
|
||||
listKind: BackupList
|
||||
plural: backups
|
||||
shortNames:
|
||||
- lhb
|
||||
singular: backup
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1beta1
|
||||
served: true
|
||||
storage: true
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
type: object
|
||||
properties:
|
||||
spec:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
status:
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
subresources:
|
||||
status: {}
|
||||
additionalPrinterColumns:
|
||||
- name: SnapshotName
|
||||
type: string
|
||||
description: The snapshot name
|
||||
jsonPath: .status.snapshotName
|
||||
- name: SnapshotSize
|
||||
type: string
|
||||
description: The snapshot size
|
||||
jsonPath: .status.size
|
||||
- name: SnapshotCreatedAt
|
||||
type: string
|
||||
description: The snapshot creation time
|
||||
jsonPath: .status.snapshotCreatedAt
|
||||
- name: LastSyncedAt
|
||||
type: string
|
||||
description: The backup last synced time
|
||||
jsonPath: .status.lastSyncedAt
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
@ -696,7 +896,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: longhorn-manager
|
||||
image: longhornio/longhorn-manager:v1.1.1
|
||||
image: longhornio/longhorn-manager:v1.2.0-preview1
|
||||
imagePullPolicy: IfNotPresent
|
||||
securityContext:
|
||||
privileged: true
|
||||
@ -705,15 +905,15 @@ spec:
|
||||
- -d
|
||||
- daemon
|
||||
- --engine-image
|
||||
- longhornio/longhorn-engine:v1.1.1
|
||||
- longhornio/longhorn-engine:v1.2.0-preview1
|
||||
- --instance-manager-image
|
||||
- longhornio/longhorn-instance-manager:v1_20201216
|
||||
- longhornio/longhorn-instance-manager:v1_20210731
|
||||
- --share-manager-image
|
||||
- longhornio/longhorn-share-manager:v1_20210416
|
||||
- --backing-image-manager-image
|
||||
- longhornio/backing-image-manager:v1_20210422
|
||||
- longhornio/backing-image-manager:v2_20210809
|
||||
- --manager-image
|
||||
- longhornio/longhorn-manager:v1.1.1
|
||||
- longhornio/longhorn-manager:v1.2.0-preview1
|
||||
- --service-account
|
||||
- longhorn-service-account
|
||||
ports:
|
||||
@ -813,7 +1013,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: longhorn-ui
|
||||
image: longhornio/longhorn-ui:v1.1.1
|
||||
image: longhornio/longhorn-ui:v1.2.0-preview1
|
||||
imagePullPolicy: IfNotPresent
|
||||
securityContext:
|
||||
runAsUser: 0
|
||||
@ -869,18 +1069,18 @@ spec:
|
||||
spec:
|
||||
initContainers:
|
||||
- name: wait-longhorn-manager
|
||||
image: longhornio/longhorn-manager:v1.1.1
|
||||
image: longhornio/longhorn-manager:v1.2.0-preview1
|
||||
command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1) != "200" ]; do echo waiting; sleep 2; done']
|
||||
containers:
|
||||
- name: longhorn-driver-deployer
|
||||
image: longhornio/longhorn-manager:v1.1.1
|
||||
image: longhornio/longhorn-manager:v1.2.0-preview1
|
||||
imagePullPolicy: IfNotPresent
|
||||
command:
|
||||
- longhorn-manager
|
||||
- -d
|
||||
- deploy-driver
|
||||
- --manager-image
|
||||
- longhornio/longhorn-manager:v1.1.1
|
||||
- longhornio/longhorn-manager:v1.2.0-preview1
|
||||
- --manager-url
|
||||
- http://longhorn-backend:9500/v1
|
||||
env:
|
||||
|
||||
@ -1,11 +1,11 @@
|
||||
longhornio/csi-attacher:v2.2.1-lh1
|
||||
longhornio/csi-attacher:v2.2.1-lh2
|
||||
longhornio/csi-node-driver-registrar:v1.2.0-lh1
|
||||
longhornio/csi-provisioner:v1.6.0-lh1
|
||||
longhornio/csi-resizer:v0.5.1-lh1
|
||||
longhornio/csi-snapshotter:v2.1.1-lh1
|
||||
longhornio/backing-image-manager:v1_20210422
|
||||
longhornio/longhorn-engine:v1.1.1
|
||||
longhornio/longhorn-instance-manager:v1_20201216
|
||||
longhornio/longhorn-manager:v1.1.1
|
||||
longhornio/csi-provisioner:v1.6.0-lh2
|
||||
longhornio/csi-resizer:v0.5.1-lh2
|
||||
longhornio/csi-snapshotter:v2.1.1-lh2
|
||||
longhornio/backing-image-manager:v2_20210809
|
||||
longhornio/longhorn-engine:v1.2.0-preview1
|
||||
longhornio/longhorn-instance-manager:v1_20210731
|
||||
longhornio/longhorn-manager:v1.2.0-preview1
|
||||
longhornio/longhorn-share-manager:v1_20210416
|
||||
longhornio/longhorn-ui:v1.1.1
|
||||
longhornio/longhorn-ui:v1.2.0-preview1
|
||||
|
||||
9
examples/crypto/secret-crypto-global.yaml
Normal file
9
examples/crypto/secret-crypto-global.yaml
Normal file
@ -0,0 +1,9 @@
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: longhorn-crypto
|
||||
namespace: longhorn-system
|
||||
stringData:
|
||||
CRYPTO_KEY_VALUE: "Simple passphrase"
|
||||
CRYPTO_KEY_PROVIDER: "secret" # this is optional we currently only support direct keys via secrets
|
||||
26
examples/crypto/storageclass-crypto-global.yaml
Normal file
26
examples/crypto/storageclass-crypto-global.yaml
Normal file
@ -0,0 +1,26 @@
|
||||
kind: StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
metadata:
|
||||
name: longhorn-crypto-global
|
||||
provisioner: driver.longhorn.io
|
||||
allowVolumeExpansion: true
|
||||
parameters:
|
||||
numberOfReplicas: "3"
|
||||
staleReplicaTimeout: "2880" # 48 hours in minutes
|
||||
fromBackup: ""
|
||||
encrypted: "true"
|
||||
# we currently don't need secrets for volume creation
|
||||
# but it allows for failing the CreateVolume call early
|
||||
# if the required secret has not been setup yet.
|
||||
csi.storage.k8s.io/provisioner-secret-name: "longhorn-crypto"
|
||||
csi.storage.k8s.io/provisioner-secret-namespace: "longhorn-system"
|
||||
csi.storage.k8s.io/node-publish-secret-name: "longhorn-crypto"
|
||||
csi.storage.k8s.io/node-publish-secret-namespace: "longhorn-system"
|
||||
csi.storage.k8s.io/node-stage-secret-name: "longhorn-crypto"
|
||||
csi.storage.k8s.io/node-stage-secret-namespace: "longhorn-system"
|
||||
# we only need crypto keys for node operations, I left these as examples
|
||||
# in case we implement external key vaults in the future
|
||||
# csi.storage.k8s.io/controller-publish-secret-name: "longhorn-crypto"
|
||||
# csi.storage.k8s.io/controller-publish-secret-namespace: "longhorn-system"
|
||||
# csi.storage.k8s.io/controller-expand-secret-name: "longhorn-crypto"
|
||||
# csi.storage.k8s.io/controller-expand-secret-namespace: "longhorn-system"
|
||||
@ -0,0 +1,26 @@
|
||||
kind: StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
metadata:
|
||||
name: longhorn-secure-per-volume-ns-longhorn-system
|
||||
provisioner: driver.longhorn.io
|
||||
allowVolumeExpansion: true
|
||||
parameters:
|
||||
numberOfReplicas: "3"
|
||||
staleReplicaTimeout: "2880" # 48 hours in minutes
|
||||
fromBackup: ""
|
||||
encrypted: "true"
|
||||
# we currently don't need secrets for volume creation
|
||||
# but it allows for failing the CreateVolume call early
|
||||
# if the required secret has not been setup yet.
|
||||
csi.storage.k8s.io/provisioner-secret-name: ${pvc.name}
|
||||
csi.storage.k8s.io/provisioner-secret-namespace: "longhorn-system"
|
||||
csi.storage.k8s.io/node-publish-secret-name: ${pvc.name}
|
||||
csi.storage.k8s.io/node-publish-secret-namespace: "longhorn-system"
|
||||
csi.storage.k8s.io/node-stage-secret-name: ${pvc.name}
|
||||
csi.storage.k8s.io/node-stage-secret-namespace: "longhorn-system"
|
||||
# we only need crypto keys for node operations, I left these as examples
|
||||
# in case we implement external key vaults in the future
|
||||
# csi.storage.k8s.io/controller-publish-secret-name: ${pvc.name}
|
||||
# csi.storage.k8s.io/controller-publish-secret-namespace: "longhorn-system"
|
||||
# csi.storage.k8s.io/controller-expand-secret-name: ${pvc.name}
|
||||
# csi.storage.k8s.io/controller-expand-secret-namespace: "longhorn-system"
|
||||
26
examples/crypto/storageclass-crypto-per-volume.yaml
Normal file
26
examples/crypto/storageclass-crypto-per-volume.yaml
Normal file
@ -0,0 +1,26 @@
|
||||
kind: StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
metadata:
|
||||
name: longhorn-crypto-per-volume
|
||||
provisioner: driver.longhorn.io
|
||||
allowVolumeExpansion: true
|
||||
parameters:
|
||||
numberOfReplicas: "3"
|
||||
staleReplicaTimeout: "2880" # 48 hours in minutes
|
||||
fromBackup: ""
|
||||
encrypted: "true"
|
||||
# we currently don't need secrets for volume creation
|
||||
# but it allows for failing the CreateVolume call early
|
||||
# if the required secret has not been setup yet.
|
||||
csi.storage.k8s.io/provisioner-secret-name: ${pvc.name}
|
||||
csi.storage.k8s.io/provisioner-secret-namespace: ${pvc.namespace}
|
||||
csi.storage.k8s.io/node-publish-secret-name: ${pvc.name}
|
||||
csi.storage.k8s.io/node-publish-secret-namespace: ${pvc.namespace}
|
||||
csi.storage.k8s.io/node-stage-secret-name: ${pvc.name}
|
||||
csi.storage.k8s.io/node-stage-secret-namespace: ${pvc.namespace}
|
||||
# we only need crypto keys for node operations, I left these as examples
|
||||
# in case we implement external key vaults in the future
|
||||
# csi.storage.k8s.io/controller-publish-secret-name: ${pvc.name}
|
||||
# csi.storage.k8s.io/controller-publish-secret-namespace: ${pvc.namespace}
|
||||
# csi.storage.k8s.io/controller-expand-secret-name: ${pvc.name}
|
||||
# csi.storage.k8s.io/controller-expand-secret-namespace: ${pvc.namespace}
|
||||
@ -64,7 +64,7 @@ rules:
|
||||
resources: ["csidrivers", "storageclasses"]
|
||||
verbs: ["*"]
|
||||
- apiGroups: ["longhorn.io"]
|
||||
resources: ["volumes", "engines", "replicas", "settings", "engineimages", "nodes", "instancemanagers", "sharemanagers", "backingimages", "backingimagemanagers"]
|
||||
resources: ["volumes", "engines", "replicas", "settings", "engineimages", "nodes", "instancemanagers", "sharemanagers", "backingimages", "backingimagemanagers", "backingimagedatasources", "backuptargets", "backupvolumes", "backups"]
|
||||
verbs: ["*"]
|
||||
- apiGroups: ["coordination.k8s.io"]
|
||||
resources: ["leases"]
|
||||
@ -101,7 +101,7 @@ spec:
|
||||
spec:
|
||||
containers:
|
||||
- name: longhorn-uninstall
|
||||
image: longhornio/longhorn-manager:v1.1.1
|
||||
image: longhornio/longhorn-manager:v1.2.0-preview1
|
||||
imagePullPolicy: Always
|
||||
securityContext:
|
||||
privileged: true
|
||||
@ -124,4 +124,4 @@ spec:
|
||||
# effect: "NoSchedule"
|
||||
# nodeSelector:
|
||||
# label-key1: "label-value1"
|
||||
# label-key2: "label-value2"
|
||||
# label-key2: "label-value2"
|
||||
|
||||
Loading…
Reference in New Issue
Block a user