Page MenuHomePhabricator
Paste P96493

ceph-csi-rbd
ActivePublic
Actions

Authored by atsuko on Tue, Sep 22, 12:54 PM.
Project Tags
None
Referenced Files
F104316759: ceph-csi-rbd
Tue, Sep 22, 12:54 PM
Subscribers
None
Comparing release=ceph-csi-rbd, chart=/home/atsuko/src/operations/deployment-charts/charts/ceph-csi-rbd/, namespace=kube-system
kube-system, ceph-config, ConfigMap (v1) has changed:
...
metadata:
name: "ceph-config"
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
data:
ceph.conf: |
...
kube-system, ceph-csi-config, ConfigMap (v1) has changed:
...
metadata:
name: "ceph-csi-config"
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
data:
config.json: |-
...
kube-system, ceph-csi-encryption-kms-config, ConfigMap (v1) has changed:
...
metadata:
name: "ceph-csi-encryption-kms-config"
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
data:
config.json: |-
...
kube-system, ceph-csi-rbd-nodeplugin, ClusterRole (rbac.authorization.k8s.io) has changed:
...
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: ceph-csi-rbd-nodeplugin
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
+ - apiGroups: [""]
+ resources: ["nodes"]
+ verbs: ["get"]
+ # WMF: the Vault grants (secrets, configmaps, serviceaccounts) and
+ # serviceaccounts/token are not granted here. We do not use the Vault KMS, and
+ # the tenant namespace grants are made by nodeplugin-role.yaml instead.
- apiGroups: [""]
resources: ["persistentvolumes"]
verbs: ["get"]
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments"]
...
kube-system, ceph-csi-rbd-nodeplugin, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: ceph-csi-rbd-nodeplugin
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
kube-system, ceph-csi-rbd-nodeplugin, DaemonSet (apps) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
spec:
selector:
...
type: RollingUpdate
template:
metadata:
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
spec:
+ securityContext:
+ {}
serviceAccountName: ceph-csi-rbd-nodeplugin
hostNetwork: true
hostPID: true
priorityClassName: system-node-critical
# to use e.g. Rook orchestrated cluster, and mons' FQDN is
# resolved through k8s service, set dns policy to cluster first
dnsPolicy: ClusterFirstWithHostNet
containers:
- - name: driver-registrar
- # This container requires write privileges to the hostPath
- # /var/lib/kubelet/plugins_registry in order to create a socket
- # that is used to register the plugin with the kubelet.
- securityContext:
- runAsUser: 0
- privileged: true
- allowPrivilegeEscalation: true
- image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-node-driver-registrar:2024-08-22-120807-77a5c01b194c89e260e0036d452576b4c6f7b376@sha256:2ec5cc7339112097310d44a46e7855f413321490ceae9609ac1e2bbaf63b8e8c"
- imagePullPolicy: IfNotPresent
- args:
- - "--v=5"
- - "--csi-address=/csi/csi.sock"
- - "--kubelet-registration-path=/var/lib/kubelet/plugins/rbd.csi.ceph.com/csi.sock"
- env:
- - name: KUBE_NODE_NAME
- valueFrom:
- fieldRef:
- fieldPath: spec.nodeName
- volumeMounts:
- - name: socket-dir
- mountPath: /csi
- - name: registration-dir
- mountPath: /registration
- resources:
- {}
- name: csi-rbdplugin
- image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-06-11-173435-f35c22fc39d70394e218d98db84c6a4ede877884@sha256:f0d4d0717f44475882e0b53093b114116938633d5d4e6a0c1a6a0820acb537e2"
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-09-18-134456-904779674c9496bf744cb072864906505607d2bf@sha256:1cf0d13631f0c5dd9d4fda80bc5b67c2ae4956a99193f69136476a23bb678776"
imagePullPolicy: IfNotPresent
args:
- "--nodeid=$(NODE_ID)"
- "--pluginpath=/var/lib/kubelet/plugins"
- "--stagingpath=/var/lib/kubelet/plugins/kubernetes.io/csi/"
...
- "--pidlimit=-1"
- "--endpoint=$(CSI_ENDPOINT)"
- "--csi-addons-endpoint=$(CSI_ADDONS_ENDPOINT)"
- "--v=5"
- "--drivername=$(DRIVER_NAME)"
+ - "--enable-read-affinity=false"
+ - "--logslowopinterval=30s"
env:
- name: POD_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
...
- name: ceph-logdir
mountPath: /var/log/ceph
- name: oidc-token
mountPath: /run/secrets/tokens
readOnly: true
+ resources:
+ {}
+ - name: driver-registrar
+ # This container requires write privileges to the hostPath
+ # /var/lib/kubelet/plugins_registry in order to create a socket
+ # that is used to register the plugin with the kubelet.
+ securityContext:
+ runAsUser: 0
+ privileged: true
+ allowPrivilegeEscalation: true
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-node-driver-registrar:2026-09-21-110728-306e18f10e1e7869bddcd8daca94d2927774f8e6@sha256:d0ad01310fd8e0d3ce8218db514a2bf9a1e4bb5697af0c8714f2749a7e8fbc89"
+ imagePullPolicy: IfNotPresent
+ args:
+ - "--v=5"
+ - "--csi-address=/csi/csi.sock"
+ - "--kubelet-registration-path=/var/lib/kubelet/plugins/rbd.csi.ceph.com/csi.sock"
+ env:
+ - name: KUBE_NODE_NAME
+ valueFrom:
+ fieldRef:
+ fieldPath: spec.nodeName
+ volumeMounts:
+ - name: socket-dir
+ mountPath: /csi
+ - name: registration-dir
+ mountPath: /registration
resources:
{}
volumes:
- name: socket-dir
hostPath:
...
kube-system, ceph-csi-rbd-nodeplugin, ServiceAccount (v1) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
kube-system, ceph-csi-rbd-nodeplugin-http-metrics, Service (v1) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-http-metrics
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
spec:
ports:
...
kube-system, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
kube-system, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
kube-system, ceph-csi-rbd-provisioner, ClusterRole (rbac.authorization.k8s.io) has changed:
...
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: ceph-csi-rbd-provisioner
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
+ # WMF: upstream also grants "get" on secrets. The provisioner reads the
+ # credentials named by the StorageClass, so list and watch are enough.
- apiGroups: [""]
resources: ["secrets"]
verbs: ["list", "watch"]
- apiGroups: [""]
resources: ["persistentvolumes"]
...
- apiGroups: [""]
resources: ["persistentvolumeclaims"]
verbs: ["get", "list", "watch", "update"]
- apiGroups: ["storage.k8s.io"]
resources: ["storageclasses"]
+ verbs: ["get", "list", "watch"]
+ # WMF: upstream grants events and endpoints cluster wide. We grant them in
+ # each tenant namespace instead. See provisioner-role.yaml.
+ - apiGroups: ["replication.storage.openshift.io"]
+ resources: ["volumegroupreplicationcontents"]
+ verbs: ["get", "list", "watch"]
+ - apiGroups: ["replication.storage.openshift.io"]
+ resources: ["volumegroupreplicationclasses"]
verbs: ["get", "list", "watch"]
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments"]
verbs: ["get", "list", "watch", "update", "patch"]
- apiGroups: ["storage.k8s.io"]
resources: ["volumeattachments/status"]
verbs: ["patch"]
+ # WMF: upstream grants configmaps and serviceaccounts cluster wide. We grant
+ # them in each tenant namespace instead.
- apiGroups: [""]
resources: ["persistentvolumeclaims/status"]
verbs: ["update", "patch"]
+ - apiGroups: [""]
+ resources: ["nodes"]
+ verbs: ["get", "list","watch"]
+ - apiGroups: ["storage.k8s.io"]
+ resources: ["csinodes"]
+ verbs: ["get", "list", "watch"]
+ # WMF: serviceaccounts/token is not granted. It is only used by the Vault
+ # KMS, which we do not deploy.
kube-system, ceph-csi-rbd-provisioner, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
...
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: ceph-csi-rbd-provisioner
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
kube-system, ceph-csi-rbd-provisioner, Deployment (apps) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
spec:
replicas: 3
...
release: ceph-csi-rbd
template:
metadata:
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
spec:
affinity:
...
- key: component
operator: In
values:
- provisioner
topologyKey: "kubernetes.io/hostname"
+ securityContext:
+ {}
serviceAccountName: ceph-csi-rbd-provisioner
hostNetwork: false
priorityClassName: system-cluster-critical
containers:
- - name: csi-provisioner
- image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-provisioner:2024-08-22-120807-77a5c01b194c89e260e0036d452576b4c6f7b376@sha256:2e3be4184503ba6b70ad26d4ef9f6d22624f72cbb9c57e5e778a2fb20356949d"
- imagePullPolicy: IfNotPresent
- args:
- - "--csi-address=$(ADDRESS)"
- - "--v=1"
- - "--timeout=60s"
- - "--leader-election=true"
- - "--retry-interval-start=500ms"
- - "--default-fstype=ext4"
- - "--extra-create-metadata=true"
- - "--feature-gates=HonorPVReclaimPolicy=true"
- - "--prevent-volume-mode-conversion=true"
- env:
- - name: ADDRESS
- value: "unix:///csi/csi-provisioner.sock"
- volumeMounts:
- - name: socket-dir
- mountPath: /csi
- resources:
- {}
- - name: csi-resizer
- image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-resizer:2024-08-22-120807-77a5c01b194c89e260e0036d452576b4c6f7b376@sha256:255f17ae27ff06eae246d1ac8535e278069f1f3dabd8d315f5254470bd3fc164"
- imagePullPolicy: IfNotPresent
- args:
- - "--v=1"
- - "--csi-address=$(ADDRESS)"
- - "--timeout=60s"
- - "--leader-election"
- - "--retry-interval-start=500ms"
- - "--handle-volume-inuse-error=false"
- - "--feature-gates=RecoverVolumeExpansionFailure=true"
- env:
- - name: ADDRESS
- value: "unix:///csi/csi-provisioner.sock"
- volumeMounts:
- - name: socket-dir
- mountPath: /csi
- resources:
- {}
- - name: csi-attacher
- image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-attacher:2024-08-22-120807-77a5c01b194c89e260e0036d452576b4c6f7b376@sha256:0c19e6639d82980599bece800ddc03532c8e52f8e2c83ff2e36015ca4043309c"
- imagePullPolicy: IfNotPresent
- args:
- - "--v=1"
- - "--csi-address=$(ADDRESS)"
- - "--leader-election=true"
- - "--retry-interval-start=500ms"
- env:
- - name: ADDRESS
- value: "unix:///csi/csi-provisioner.sock"
- volumeMounts:
- - name: socket-dir
- mountPath: /csi
- resources:
- {}
- name: csi-rbdplugin
- image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-06-11-173435-f35c22fc39d70394e218d98db84c6a4ede877884@sha256:f0d4d0717f44475882e0b53093b114116938633d5d4e6a0c1a6a0820acb537e2"
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-09-18-134456-904779674c9496bf744cb072864906505607d2bf@sha256:1cf0d13631f0c5dd9d4fda80bc5b67c2ae4956a99193f69136476a23bb678776"
imagePullPolicy: IfNotPresent
args:
- "--nodeid=$(NODE_ID)"
- "--type=rbd"
- "--controllerserver=true"
...
- "--rbdhardmaxclonedepth=8"
- "--rbdsoftmaxclonedepth=4"
- "--maxsnapshotsonimage=450"
- "--minsnapshotsonimage=250"
- "--setmetadata=true"
+ - "--logslowopinterval=30s"
env:
- name: POD_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
...
- name: keys-tmp-dir
mountPath: /tmp/csi/keys
- name: oidc-token
mountPath: /run/secrets/tokens
readOnly: true
+ resources:
+ {}
+ - name: csi-provisioner
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-provisioner:2026-09-21-110728-306e18f10e1e7869bddcd8daca94d2927774f8e6@sha256:5b4b3b52b0663963879089e3c1ec86e5f0947f06c8ec12c326b0b49b75d48626"
+ imagePullPolicy: IfNotPresent
+ args:
+ - "--csi-address=$(ADDRESS)"
+ - "--v=1"
+ - "--timeout=60s"
+ - "--leader-election=true"
+ - "--retry-interval-start=500ms"
+ - "--default-fstype=ext4"
+ - "--extra-create-metadata=true"
+ - "--feature-gates=HonorPVReclaimPolicy=true"
+ - "--prevent-volume-mode-conversion=true"
+ - "--immediate-topology=false"
+ env:
+ - name: ADDRESS
+ value: "unix:///csi/csi-provisioner.sock"
+ volumeMounts:
+ - name: socket-dir
+ mountPath: /csi
+ resources:
+ {}
+ - name: csi-resizer
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-resizer:2026-09-21-110728-306e18f10e1e7869bddcd8daca94d2927774f8e6@sha256:34bede5dc15e585f33a1ad9ecbd57b8fc8289b168d27900149ebe4cd916e6e20"
+ imagePullPolicy: IfNotPresent
+ args:
+ - "--v=1"
+ - "--csi-address=$(ADDRESS)"
+ - "--timeout=60s"
+ - "--leader-election"
+ - "--retry-interval-start=500ms"
+ - "--handle-volume-inuse-error=false"
+ - "--feature-gates=RecoverVolumeExpansionFailure=true"
+ env:
+ - name: ADDRESS
+ value: "unix:///csi/csi-provisioner.sock"
+ volumeMounts:
+ - name: socket-dir
+ mountPath: /csi
+ resources:
+ {}
+ - name: csi-attacher
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/kubernetes/csi/csi-attacher:2026-09-21-110728-306e18f10e1e7869bddcd8daca94d2927774f8e6@sha256:3fbc647df78586ce0ffa0fe22fb0834b5567e4dadd68845aec325ea229686781"
+ imagePullPolicy: IfNotPresent
+ args:
+ - "--v=1"
+ - "--csi-address=$(ADDRESS)"
+ - "--leader-election=true"
+ - "--retry-interval-start=500ms"
+ - "--default-fstype=ext4"
+ env:
+ - name: ADDRESS
+ value: "unix:///csi/csi-provisioner.sock"
+ volumeMounts:
+ - name: socket-dir
+ mountPath: /csi
resources:
{}
- name: csi-rbdplugin-controller
- image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-06-11-173435-f35c22fc39d70394e218d98db84c6a4ede877884@sha256:f0d4d0717f44475882e0b53093b114116938633d5d4e6a0c1a6a0820acb537e2"
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-09-18-134456-904779674c9496bf744cb072864906505607d2bf@sha256:1cf0d13631f0c5dd9d4fda80bc5b67c2ae4956a99193f69136476a23bb678776"
imagePullPolicy: IfNotPresent
args:
- "--type=controller"
- "--v=5"
- "--drivername=$(DRIVER_NAME)"
...
- name: ceph-config
mountPath: /etc/ceph/
resources:
{}
- name: liveness-prometheus
- image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-06-11-173435-f35c22fc39d70394e218d98db84c6a4ede877884@sha256:f0d4d0717f44475882e0b53093b114116938633d5d4e6a0c1a6a0820acb537e2"
+ image: "docker-registry.discovery.wmnet/repos/data-engineering/ceph-csi:2026-09-18-134456-904779674c9496bf744cb072864906505607d2bf@sha256:1cf0d13631f0c5dd9d4fda80bc5b67c2ae4956a99193f69136476a23bb678776"
imagePullPolicy: IfNotPresent
args:
- "--type=liveness"
- "--endpoint=$(CSI_ENDPOINT)"
- "--metricsport=8080"
...
kube-system, ceph-csi-rbd-provisioner, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
resources: ["configmaps"]
verbs: ["get", "list", "watch", "create","update", "delete"]
- apiGroups: ["coordination.k8s.io"]
resources: ["leases"]
verbs: ["get", "watch", "list", "delete", "update", "create"]
+ # WMF: the provisioner ClusterRole cannot read secrets. Name the one secret
+ # it needs instead.
- apiGroups: [""]
resources: ["secrets"]
verbs: ["get", "watch", "list"]
resourceNames: ["csi-rbd-secret"]
kube-system, ceph-csi-rbd-provisioner, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
kube-system, ceph-csi-rbd-provisioner, ServiceAccount (v1) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
kube-system, ceph-csi-rbd-provisioner-http-metrics, Service (v1) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-http-metrics
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
spec:
ports:
...
kube-system, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
kube-system, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: kube-system
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
kube-system, ceph-rbd-hdd, StorageClass (storage.k8s.io) has changed:
...
kind: StorageClass
metadata:
name: ceph-rbd-hdd
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
release: ceph-csi-rbd
heritage: Helm
provisioner: rbd.csi.ceph.com
parameters:
clusterID: 8e69717a-518b-4c00-9f96-0635d9b913c6
- pool: dse-k8s-csi-rbd-hdd
imageFeatures: layering
+ pool: dse-k8s-csi-rbd-hdd
csi.storage.k8s.io/provisioner-secret-name: csi-rbd-secret
csi.storage.k8s.io/provisioner-secret-namespace: kube-system
csi.storage.k8s.io/controller-expand-secret-name: csi-rbd-secret
csi.storage.k8s.io/controller-expand-secret-namespace: kube-system
csi.storage.k8s.io/node-stage-secret-name: csi-rbd-secret
...
kube-system, ceph-rbd-ssd, StorageClass (storage.k8s.io) has changed:
...
kind: StorageClass
metadata:
name: ceph-rbd-ssd
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
release: ceph-csi-rbd
heritage: Helm
provisioner: rbd.csi.ceph.com
parameters:
clusterID: 8e69717a-518b-4c00-9f96-0635d9b913c6
- pool: dse-k8s-csi-rbd-ssd
imageFeatures: layering
+ pool: dse-k8s-csi-rbd-ssd
csi.storage.k8s.io/provisioner-secret-name: csi-rbd-secret
csi.storage.k8s.io/provisioner-secret-namespace: kube-system
csi.storage.k8s.io/controller-expand-secret-name: csi-rbd-secret
csi.storage.k8s.io/controller-expand-secret-namespace: kube-system
csi.storage.k8s.io/node-stage-secret-name: csi-rbd-secret
...
kube-system, csi-rbd-secret, Secret (v1) has changed:
...
apiVersion: v1
kind: Secret
metadata:
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
heritage: Helm
release: ceph-csi-rbd
name: csi-rbd-secret
namespace: kube-system
data:
...
kube-system, rbd.csi.ceph.com, CSIDriver (storage.k8s.io) has changed:
# Source: ceph-csi-rbd/templates/csidriver-crd.yaml
apiVersion: storage.k8s.io/v1
-
kind: CSIDriver
metadata:
name: rbd.csi.ceph.com
+ labels:
+ app: ceph-csi-rbd
+ chart: ceph-csi-rbd-0.2.0
+ release: ceph-csi-rbd
+ heritage: Helm
spec:
attachRequired: true
podInfoOnMount: false
fsGroupPolicy: File
+ seLinuxMount: true
opensearch-apifeatureusage, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-apifeatureusage
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-apifeatureusage, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-apifeatureusage
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-apifeatureusage, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-apifeatureusage
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-apifeatureusage, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-apifeatureusage
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-apifeatureusage-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-apifeatureusage-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-apifeatureusage-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-apifeatureusage-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-apifeatureusage-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-apifeatureusage-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-apifeatureusage-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-apifeatureusage-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ipoid, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ipoid
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ipoid, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ipoid
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ipoid, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ipoid
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ipoid, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ipoid
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ipoid-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ipoid-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ipoid-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ipoid-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ipoid-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ipoid-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ipoid-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ipoid-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-semantic-search, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-semantic-search
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-semantic-search, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-semantic-search
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-semantic-search, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-semantic-search
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-semantic-search, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-semantic-search
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-semantic-search-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-semantic-search-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-semantic-search-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-semantic-search-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-semantic-search-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-semantic-search-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-semantic-search-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-semantic-search-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-toolhub, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-toolhub
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-toolhub, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-toolhub
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-toolhub, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-toolhub
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-toolhub, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-toolhub
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-toolhub-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-toolhub-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-toolhub-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-toolhub-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-toolhub-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-toolhub-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-toolhub-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-toolhub-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ttmserver, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ttmserver
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ttmserver, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ttmserver
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ttmserver, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ttmserver
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ttmserver, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ttmserver
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ttmserver-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ttmserver-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ttmserver-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: opensearch-ttmserver-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
opensearch-ttmserver-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ttmserver-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
opensearch-ttmserver-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: opensearch-ttmserver-test
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
wdqs, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: wdqs
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
wdqs, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: wdqs
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
wdqs, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: wdqs
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
wdqs, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: wdqs
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
wdqs-next, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: wdqs-next
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
wdqs-next, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-nodeplugin-tenant
namespace: wdqs-next
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: nodeplugin
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
wdqs-next, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: wdqs-next
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
rules:
- apiGroups: [""]
...
wdqs-next, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has changed:
...
metadata:
name: ceph-csi-rbd-provisioner-tenant
namespace: wdqs-next
labels:
app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
+ chart: ceph-csi-rbd-0.2.0
component: provisioner
release: ceph-csi-rbd
heritage: Helm
subjects:
- kind: ServiceAccount
...
analytics, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/nodeplugin-role.yaml
- kind: Role
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-nodeplugin-tenant
- namespace: analytics
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: nodeplugin
- release: ceph-csi-rbd
- heritage: Helm
- rules:
- - apiGroups: [""]
- resources: ["configmaps"]
- verbs: ["get"]
- - apiGroups: [""]
- resources: ["serviceaccounts"]
- verbs: ["get"]
+
analytics, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/nodeplugin-rolebinding.yaml
- kind: RoleBinding
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-nodeplugin-tenant
- namespace: analytics
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: nodeplugin
- release: ceph-csi-rbd
- heritage: Helm
- subjects:
- - kind: ServiceAccount
- name: ceph-csi-rbd-nodeplugin
- namespace: kube-system
- roleRef:
- kind: Role
- name: ceph-csi-rbd-nodeplugin-tenant
- apiGroup: rbac.authorization.k8s.io
+
analytics, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/provisioner-role.yaml
- kind: Role
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-provisioner-tenant
- namespace: analytics
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: provisioner
- release: ceph-csi-rbd
- heritage: Helm
- rules:
- - apiGroups: [""]
- resources: ["events"]
- verbs: ["list", "watch", "create", "update", "patch"]
- - apiGroups: [""]
- resources: ["endpoints"]
- verbs: ["get", "create", "update"]
- - apiGroups: [""]
- resources: ["configmaps"]
- verbs: ["get"]
- - apiGroups: [""]
- resources: ["serviceaccounts"]
- verbs: ["get"]
+
analytics, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/provisioner-rolebinding.yaml
- kind: RoleBinding
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-provisioner-tenant
- namespace: analytics
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: provisioner
- release: ceph-csi-rbd
- heritage: Helm
- subjects:
- - kind: ServiceAccount
- name: ceph-csi-rbd-provisioner
- namespace: kube-system
- roleRef:
- kind: Role
- name: ceph-csi-rbd-provisioner-tenant
- apiGroup: rbac.authorization.k8s.io
+
analytics-test, ceph-csi-rbd-nodeplugin-tenant, Role (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/nodeplugin-role.yaml
- kind: Role
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-nodeplugin-tenant
- namespace: analytics-test
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: nodeplugin
- release: ceph-csi-rbd
- heritage: Helm
- rules:
- - apiGroups: [""]
- resources: ["configmaps"]
- verbs: ["get"]
- - apiGroups: [""]
- resources: ["serviceaccounts"]
- verbs: ["get"]
+
analytics-test, ceph-csi-rbd-nodeplugin-tenant, RoleBinding (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/nodeplugin-rolebinding.yaml
- kind: RoleBinding
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-nodeplugin-tenant
- namespace: analytics-test
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: nodeplugin
- release: ceph-csi-rbd
- heritage: Helm
- subjects:
- - kind: ServiceAccount
- name: ceph-csi-rbd-nodeplugin
- namespace: kube-system
- roleRef:
- kind: Role
- name: ceph-csi-rbd-nodeplugin-tenant
- apiGroup: rbac.authorization.k8s.io
+
analytics-test, ceph-csi-rbd-provisioner-tenant, Role (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/provisioner-role.yaml
- kind: Role
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-provisioner-tenant
- namespace: analytics-test
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: provisioner
- release: ceph-csi-rbd
- heritage: Helm
- rules:
- - apiGroups: [""]
- resources: ["events"]
- verbs: ["list", "watch", "create", "update", "patch"]
- - apiGroups: [""]
- resources: ["endpoints"]
- verbs: ["get", "create", "update"]
- - apiGroups: [""]
- resources: ["configmaps"]
- verbs: ["get"]
- - apiGroups: [""]
- resources: ["serviceaccounts"]
- verbs: ["get"]
+
analytics-test, ceph-csi-rbd-provisioner-tenant, RoleBinding (rbac.authorization.k8s.io) has been removed:
- # Source: ceph-csi-rbd/templates/provisioner-rolebinding.yaml
- kind: RoleBinding
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: ceph-csi-rbd-provisioner-tenant
- namespace: analytics-test
- labels:
- app: ceph-csi-rbd
- chart: ceph-csi-rbd-0.1.13
- component: provisioner
- release: ceph-csi-rbd
- heritage: Helm
- subjects:
- - kind: ServiceAccount
- name: ceph-csi-rbd-provisioner
- namespace: kube-system
- roleRef:
- kind: Role
- name: ceph-csi-rbd-provisioner-tenant
- apiGroup: rbac.authorization.k8s.io
+
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits