From 453035743a77fb602e7a3e2acbafa22d3e7720de Mon Sep 17 00:00:00 2001
From: godlzr <godlzr@gmail.com>
Date: Sat, 31 May 2025 11:41:34 -0400
Subject: [PATCH] add 4.2

---
 charts/index.yaml                             |   6 +-
 charts/v4.2.0/csi-driver-nfs-v4.2.0.tgz       | Bin 0 -> 3703 bytes
 charts/v4.2.0/csi-driver-nfs/.helmignore      |  22 +++
 charts/v4.2.0/csi-driver-nfs/Chart.yaml       |   5 +
 .../v4.2.0/csi-driver-nfs/templates/NOTES.txt |   5 +
 .../csi-driver-nfs/templates/_helpers.tpl     |  19 +++
 .../templates/csi-nfs-controller.yaml         | 123 ++++++++++++++++
 .../templates/csi-nfs-driverinfo.yaml         |  15 ++
 .../templates/csi-nfs-node.yaml               | 134 ++++++++++++++++++
 .../templates/rbac-csi-nfs.yaml               |  64 +++++++++
 charts/v4.2.0/csi-driver-nfs/values.yaml      | 116 +++++++++++++++
 11 files changed, 506 insertions(+), 3 deletions(-)
 create mode 100644 charts/v4.2.0/csi-driver-nfs-v4.2.0.tgz
 create mode 100644 charts/v4.2.0/csi-driver-nfs/.helmignore
 create mode 100644 charts/v4.2.0/csi-driver-nfs/Chart.yaml
 create mode 100644 charts/v4.2.0/csi-driver-nfs/templates/NOTES.txt
 create mode 100644 charts/v4.2.0/csi-driver-nfs/templates/_helpers.tpl
 create mode 100644 charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-controller.yaml
 create mode 100644 charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml
 create mode 100644 charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-node.yaml
 create mode 100644 charts/v4.2.0/csi-driver-nfs/templates/rbac-csi-nfs.yaml
 create mode 100644 charts/v4.2.0/csi-driver-nfs/values.yaml

diff --git a/charts/index.yaml b/charts/index.yaml
index 621b9edc..4bc1219c 100644
--- a/charts/index.yaml
+++ b/charts/index.yaml
@@ -2,12 +2,12 @@ apiVersion: v1
 entries:
   csi-driver-nfs:
   - apiVersion: v1
-    appVersion: v4.0.0
+    appVersion: v4.2.0
     created: "2022-05-06T12:35:56.6991353Z"
     description: CSI NFS Driver for Kubernetes
     digest: cb537287512ce9f99adaead8cd4904ed7284780bdc44c9b8d6705e66f28bfa5c
     name: csi-driver-nfs
     urls:
-    - https://gitea.devindata.com/devindata-public/csi-driver-nfs/raw/branch/master/charts/v4.0.0/csi-driver-nfs-v4.0.0.tgz
-    version: v4.0.0
+    - https://gitea.devindata.com/devindata-public/csi-driver-nfs/raw/branch/master/charts/v4.0.0/csi-driver-nfs-v4.2.0.tgz
+    version: v4.2.0
 generated: "2022-05-06T12:35:56.693722959Z"
diff --git a/charts/v4.2.0/csi-driver-nfs-v4.2.0.tgz b/charts/v4.2.0/csi-driver-nfs-v4.2.0.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..560838d9bfd6f32d85268972ba6b5db9b2b7b1b1
GIT binary patch
literal 3703
zcmV--4v6s|iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PI}dbKADE&olpuy>cJY+>nwb+v(+uA5z=t@w9O~mYXwYIvo#0
zt|T0T01JS!Rmb;lzXO1jNQ(OKXKqf6nZz;)EEbFX!fzo*iu$pn6O=w5s`kN{NF7W`
z!d^XI>vTGuy`3HVv(xF+e|EO_y05l(dhd36op-&??yJuBPN%p13ObL-!_t;1P2{W2
zgXgL*?i*<&rJqqMDtHK!ZI7hs{MVhJ8+5!FRU~Pu?X!daF`Rtp!=Y6f7zzo$W&@NQ
zH7bvj1VgB*lsBo-``RmhY2{Y4{|R9ksz-JJYwUlw*V(DtfA?MY#r~h8MVZnf`Hc*a
zsSs{%J(`dah8_R_A1e33G>NHDR0}x`LE?xiEvLcdPb#3It?0;CT1Ya&HXo{#Wh2UG
zBQ+V#jK6r6W{jN*Mx$v6$HNn$PbDhk+IEN(J(XfYjoUzZcNUCJr*i@|MtVVSQ$`q_
zAV;N6r5NDd`6z~`W_XQ@Zt&BlTyPPi^S5ViGICFu7(#`y%YxJbUwc7!Jzt(eIiV50
zk0OzAZTN{K5{)5fnIUY!KgY=J=eLme1>!m@xT1`~0P`WS4I@*L1<*$gTELJng+Pbq
zAzTq|A7%>8?-Iln56pamYbh8*=|T=4Du4dWR|K};gd_-J2>qOcoLxh%G`*09c<gy{
zK%)9mJOCHgOf2)9^uqGPAW}4!xCf9J`ll!ps*Luj5IUYWM4~fkH3&HwF#OQ}MT#sf
zM4Qj!-W_vBIer!_GZR=*c;00;K!*B|$`INUBHN4(+WAAzD~V#p*`i21t1XO1M1`>J
z0hs;QIGUbMQw-q@-Lg%$jDO-EiPA>4j)VN+funZH2*>%W20IxeVS0Qjqz<9`KYP1I
zr<fT1h7)8V?0NuKLS9ln`e+1Z*VSt4ByD*BF;|6T4sl2_rUABqObBI0K;VMZ?B!cH
zV430d1C>hulj`w5gwiKid*K0);gE8wr`FLq!|Ef$NDG-i(t@ER+U}fPhYy!H4WVUi
zM+%0)<t*PZHkMc^wQ`FQsTpmkwT`Z-(yDlY!y!gGgw~1ZM`MgLhOLe0=i8SWfj{{y
z{)48Gs6-|s%q7?C#TiYgE`^l@6YINnI-QTyD}35t8LD!xD9u9H?j#Gty2YqQSG{bq
z?FUX)3XIF9=ssWy&ur78C7Y*DX&ni<{+-Y0I2Tbh*$wQxcV9DW)V7*RJ?|zj54&Gc
zuX+#BtF0|K!y!uK5t<k%IGW&>2#KJK``0QDjV2z#l?mY{1)zKcHZN3$gv4P8W35va
zw%b)d5{pQ+HBpz!xRfCsWfJ{V#5M{M%2BorJ>L@ZQ%NU8W08wY+uqie%Rf&u#`=z-
z5dQen+X6o~hE_h*P;o4`UQUz`Xtnd7#w2A#qiUagIzQ?M`dUAHj&=A?Z|7a@{I|Qi
z(|I}nJx7D{G1gHXs$hg#8>^2oWnzl4aSJy2j$F(LJnvjUG{)$%J~|b#0;P%0)LTdy
z5``vr3_TCPc#B9g@O@*=DkTx_-`qfOhPGdDQapv*Tf>7R=KCrSANwtmrnTIKa-|7x
zAOyF!E%5y-qNDNG7W4nxw$%PF#>i5XD$waep`bPPzuoQC@!!3jZtunZpQGK}wBNvl
zCLt))Fr*CiG{ybIh$R|h2yfcAx1MLa9bKn{$Dqe(gRwbSo6nK08Q6X|H$KETq#U7T
zj>e{23;g*To2~|~%3y6Y`0Nlz)AQ2=rKB;!7jq)!5$yHsN1F7r;gDWK%bycN9^223
zHD&=U3nYw@CG*4)8u@bF9WnRW<WS3fO9-td@6tFXA)Jgb_6O72r~-soHZV_cZf>Bk
z!m<#9rQ>D*yPeI+_WcaU&xaYQ1Zv#2n^ozWFUFrgDMo&=c!BZ8t^aO8>!Ov@GSZ~O
z+18aIM6kjJE&fFk*4*O@P#z=K(6!=s<jii?Huh^<#`n>d`u|1z=-yR<)&76Gv)kLP
z`u}cccYE)}|363bec!vJJPzT|rg{l-?UjpyBu!O&vh5|PNlY}E;}XVU6b3$567Jkd
z-peL)u4_|{XM6?a5zFG5V-Cu0;`Y{4DOzN94q!IVUc7f46ltS7ASWgf{B7p#O(SW#
zejNo&>IP{GmNt(m1FCLpVNW>+GZ}8M?mb804vYd6Vlu7frR(SFIrW7TcY_CC7(HY2
zr#YdLBX<wR4r#g)@-nXrz*Y&j2f~y9ju>0m!9wT2hxQkTMMF%B0!0b-YL>&S!+ic~
zk>aGTwbj=pT16<jqI%pkRRM6#XPQA?W!cq)v>=`eFgDxjYH$}S1V(vwJ$qk|z9r?K
z!}cZBS&dwW&}vmkBacgi*GyI}2W&891!i6{^D4QQ1y;*6*2y}RR7k3)2aG7?G(k<3
z#>CH0w0<P1rV(K)IVb^_bJ`U&^A0@CK(P{n=a)d=rW$5$u6YJmw$7jmxCisfAl%-D
z>w0T4%Cozf%aNlJUyiqyKiTiL79RSBTN1|-mD>N|_4~uav!j0h$A*p!NsQ9Bdq@Re
z-(v%ypn(WpYe{_PL;S+)?i&wO?u>j=U!W6yzJSU*aKL&9CNnbs0wto$`o5f&3a0Bs
zJ}<78Jw3q0mi}yAY+(ajd6DR`<D<r*<KFOv+Ml~lfHIP9ZLOZ5mm_H2vBoZZ0iJ8~
zcDKxMA+!RV_p9aZ6$)E{^VjKXwex1`T2;(t8|Qjju6<1t6q(-dsf7-%(&48<>iy;j
zRAq5q8L4isqc+*^-br_=wC|%jE0n{u<(hR5)v0j1R&)4JZK5tFPg<iSrpuygD2y`e
z`vuo{t*e4bC7n=)BaCNt_<4&+N(PisO|d3V020R`{L$+FtAFwS@Z<4G>(5FD!kD-^
zEr=hfh%n;r(A8#HzxQTU%XYlkOZ$^$Dw@~xn%$;}uQcBO;q}R<!=sDi!zK@oJWd7W
zdjE&l2mRxVqm#qaPsb<cO<mo&((G}W8~3zGTN{R1P4v_G9g2q0^=lT*l=3SEImMXD
zB~qzfMW_*58YXfnHHC=}QY3YS0T@zb@fi*m-{kL{{h2J@<~k<IHO^d?d~=k_IK2+r
z?PWgCc(Db&ndKv{ock~*S41P%<L}zLR0=I3!9qAcI4!+fa^uPhh)|YEJReI`W5Hrq
zlAgD**6A;(>#|LqOIyN*U1-xglg(4Y4v~>*A0xqI6+*95>5~VG+3W4<>l7swar5By
zjye^wnk(*dXI<K*`6VH^y=@x;jl-l!$td?lt)FR3rAxI4tDDesW*g?**BmIEtQvCU
zr6MxtPRq8ps0o|P%boNOt$2i-E==FJa!gV^wbz+$z6l6(E&k_TQa%(<g#UFqyPZxQ
z|J!-@a{vEXn(zA+xG%piT3jKWZ0G3ULI2p*cUJ>})!;sZ?TFSS8lT}`8I>l{DlQH>
z)BcSPF`7mUKZ+P<7lKX=OG>+2ur(Yazfc)0-k8k2h7U*S7!#C)c~x9vC8f%}Oxt~^
zDmOJhP=*zPUwi)^+Sb~?$wMCaeSkIi|8}=mzyJTPySw{h|Ig7%_&>o!@IKxH{<k{v
zw7`Fs#zbSk0>zsgg7VSt_Eiz<>$e!|Y*ybFS%!=CXJvx-sUOq?@l@!4ZJKWY_um2`
z>4<W|EWjTL&Rx<8S0ZCE3=jrVTq3u~tH^Yj1}JwM>5(e|We?{ovWWXyF@F`TznPVL
z!QaiKo(;$TPEkQC<nIy>v@5?i61egkN~^HJ#mm}jvBHKSiwd*?kihG?(=A#gl7#Sh
z5#aG*gRfwf6(T>J&U)Emh&jUU|M2?o?D+H1*~Qt>FBkn!2ftpNzCZuRkBw9k5#xR{
zshU0B6Y|(yYiw1`zN-N~L<~!TyQYE7Fxqmoz<$SZmL|Jjmo3B1`s?pMA6;0?@Z|l+
zqh~`6H^7%0Ea6!_%6xETn^%)4cfGH7YFPOls}<isZQ)UCDaOWOUBSUczwe{e@KPPP
zTe9;~7g$vncvvy;iJkM;E=k<Ywcov-&?uby)e@SrgH^?aPx7Gn^7V!?f9e{?L)Lv!
ze4}rpxnNoB|JvBt_t2K&zj8n#KiA(U#eX}!-Ok<u{=4(?_g|i+)zHHFl~{KR*T22>
z>V=|NWvE{n(f|}2B`SFgqgX{sR{et=j|?3@4aWsq`1rh*a5Xz_SY@EJ7kNp}U0gjA
z3@hujy-B9WLejsjH!W53R^s@Th2pg~88s_kL$#NBH(r#?m<zK$kd)dwnli_l{4`Sv
z=YO=)S+y?@&v~Z_%7N`LLfv``Ek>37X}{HJJ~*+MPq7I^Xvf`S!iW)?Y&@$gM>Ne<
zEuc2docD+rQEJ0=Zn!3#AlLVhT)vvO&`Ot0w|-fXqQ*8JbwLjz7zrU`%F7neG>5g?
zrx9A??z=)t(|mt=^J-klxPPWRrhN1iHeS1B?ho>*Hm=TPgMVYBb0cr`uJiovE^%Np
z?`phJeqdg7iTC$!Fx$lyg8mQru3|0!3&zM2I^sg&<IS=5{!h1_|Lwfwf6vsm;FM@%
z2=-f7Zs*+}ei>wx8D{_~i7v?qRp4#G`IstDS!xj?P-A2aMobJ`ah&qeTad_zrW3Sh
z#nN-aV{Z#Mx^q6fP9+ZMHO8(w`CmT<@QJgj{hKtYV+m4}z$nMS3l94ieJvz<TW}zf
zL~!_g(1(~x<pm?E+xCCQz84JsmTmig@nAe^oBxVm)r7a_ga#zK%u@T^cjdha)K%)e
z2?pfSdlTp+_1^riw*{Yxq#{#re0Ze1AeF+nJujd!lD6w7#lO8^q9PGv`y2KLFYTqh
VwC|_=UjP6A|Npz<O4$Hh002DyMeqOs

literal 0
HcmV?d00001

diff --git a/charts/v4.2.0/csi-driver-nfs/.helmignore b/charts/v4.2.0/csi-driver-nfs/.helmignore
new file mode 100644
index 00000000..50af0317
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/.helmignore
@@ -0,0 +1,22 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/v4.2.0/csi-driver-nfs/Chart.yaml b/charts/v4.2.0/csi-driver-nfs/Chart.yaml
new file mode 100644
index 00000000..ff1bbcf8
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/Chart.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: v4.2.0
+description: CSI NFS Driver for Kubernetes
+name: csi-driver-nfs
+version: v4.2.0
diff --git a/charts/v4.2.0/csi-driver-nfs/templates/NOTES.txt b/charts/v4.2.0/csi-driver-nfs/templates/NOTES.txt
new file mode 100644
index 00000000..cecf3b9e
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/templates/NOTES.txt
@@ -0,0 +1,5 @@
+ The CSI NFS Driver is getting deployed to your cluster.
+
+To check CSI NFS Driver pods status, please run:
+
+  kubectl --namespace={{ .Release.Namespace }} get pods --selector="app.kubernetes.io/instance={{ .Release.Name }}" --watch
\ No newline at end of file
diff --git a/charts/v4.2.0/csi-driver-nfs/templates/_helpers.tpl b/charts/v4.2.0/csi-driver-nfs/templates/_helpers.tpl
new file mode 100644
index 00000000..901a53f1
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/templates/_helpers.tpl
@@ -0,0 +1,19 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* Expand the name of the chart.*/}}
+{{- define "nfs.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/* labels for helm resources */}}
+{{- define "nfs.labels" -}}
+labels:
+  app.kubernetes.io/instance: "{{ .Release.Name }}"
+  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
+  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
+  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
+  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  {{- if .Values.customLabels }}
+{{ toYaml .Values.customLabels | indent 2 -}}
+  {{- end }}
+{{- end -}}
diff --git a/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-controller.yaml b/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-controller.yaml
new file mode 100644
index 00000000..9190b673
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-controller.yaml
@@ -0,0 +1,123 @@
+---
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.controller.name }}
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+spec:
+  replicas: {{ .Values.controller.replicas }}
+  selector:
+    matchLabels:
+      app: {{ .Values.controller.name }}
+  strategy:
+    type: {{ .Values.controller.strategyType }}
+  template:
+    metadata:
+{{ include "nfs.labels" . | indent 6 }}
+        app: {{ .Values.controller.name }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: true  # controller also needs to mount nfs to create dir
+      dnsPolicy: {{ .Values.controller.dnsPolicy }}
+      serviceAccountName: {{ .Values.serviceAccount.controller }}
+{{- with .Values.controller.affinity }}
+      affinity:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      nodeSelector:
+        kubernetes.io/os: linux
+        {{- if .Values.controller.runOnMaster}}
+        node-role.kubernetes.io/master: ""
+        {{- end}}
+        {{- if .Values.controller.runOnControlPlane}}
+        node-role.kubernetes.io/control-plane: ""
+        {{- end}}
+{{- with .Values.controller.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+      priorityClassName: system-cluster-critical
+{{- with .Values.controller.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      containers:
+        - name: csi-provisioner
+          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
+          args:
+            - "-v=2"
+            - "--csi-address=$(ADDRESS)"
+            - "--leader-election"
+            - "--leader-election-namespace={{ .Release.Namespace }}"
+            - "--extra-create-metadata=true"
+          env:
+            - name: ADDRESS
+              value: /csi/csi.sock
+          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
+          volumeMounts:
+            - mountPath: /csi
+              name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
+        - name: liveness-probe
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
+            - --v=2
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
+        - name: nfs
+          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
+          securityContext:
+            privileged: true
+            capabilities:
+              add: ["SYS_ADMIN"]
+            allowPrivilegeEscalation: true
+          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
+          args:
+            - "--v={{ .Values.controller.logLevel }}"
+            - "--nodeid=$(NODE_ID)"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
+            - "--working-mount-dir={{ .Values.controller.workingMountDir }}"
+          env:
+            - name: NODE_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          ports:
+            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          volumeMounts:
+            - name: pods-mount-dir
+              mountPath: {{ .Values.kubeletDir }}/pods
+              mountPropagation: "Bidirectional"
+            - mountPath: /csi
+              name: socket-dir
+          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
+      volumes:
+        - name: pods-mount-dir
+          hostPath:
+            path: {{ .Values.kubeletDir }}/pods
+            type: Directory
+        - name: socket-dir
+          emptyDir: {}
diff --git a/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml b/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml
new file mode 100644
index 00000000..a6afd896
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: storage.k8s.io/v1
+kind: CSIDriver
+metadata:
+  name: {{ .Values.driver.name }}
+spec:
+  attachRequired: false
+  volumeLifecycleModes:
+    - Persistent
+  {{- if .Values.feature.enableInlineVolume}}
+    - Ephemeral
+  {{- end}}
+  {{- if .Values.feature.enableFSGroupPolicy}}
+  fsGroupPolicy: File
+  {{- end}}
diff --git a/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-node.yaml b/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-node.yaml
new file mode 100644
index 00000000..b9f819fc
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-node.yaml
@@ -0,0 +1,134 @@
+---
+kind: DaemonSet
+apiVersion: apps/v1
+metadata:
+  name: {{ .Values.node.name }}
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+spec:
+  updateStrategy:
+    rollingUpdate:
+      maxUnavailable: {{ .Values.node.maxUnavailable }}
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app: {{ .Values.node.name }}
+  template:
+    metadata:
+{{ include "nfs.labels" . | indent 6 }}
+        app: {{ .Values.node.name }}
+    spec:
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
+      hostNetwork: true # original nfs connection would be broken without hostNetwork setting
+      dnsPolicy: {{ .Values.controller.dnsPolicy }}
+      serviceAccountName: csi-nfs-node-sa
+{{- with .Values.node.affinity }}
+      affinity:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      nodeSelector:
+        kubernetes.io/os: linux
+{{- with .Values.node.nodeSelector }}
+{{ toYaml . | indent 8 }}
+{{- end }}
+{{- with .Values.node.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+{{- end }}
+      containers:
+        - name: liveness-probe
+          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
+          args:
+            - --csi-address=/csi/csi.sock
+            - --probe-timeout=3s
+            - --health-port={{ .Values.node.livenessProbe.healthPort }}
+            - --v=2
+          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
+        - name: node-driver-registrar
+          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
+          livenessProbe:
+            exec:
+              command:
+                - /csi-node-driver-registrar
+                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+                - --mode=kubelet-registration-probe
+            initialDelaySeconds: 30
+            timeoutSeconds: 15
+          args:
+            - --v=2
+            - --csi-address=/csi/csi.sock
+            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+          env:
+            - name: DRIVER_REG_SOCK_PATH
+              value: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin/csi.sock
+            - name: KUBE_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: registration-dir
+              mountPath: /registration
+          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
+        - name: nfs
+          securityContext:
+            privileged: true
+            capabilities:
+              add: ["SYS_ADMIN"]
+            allowPrivilegeEscalation: true
+          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
+          args :
+            - "--v={{ .Values.node.logLevel }}"
+            - "--nodeid=$(NODE_ID)"
+            - "--endpoint=$(CSI_ENDPOINT)"
+            - "--drivername={{ .Values.driver.name }}"
+            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
+          env:
+            - name: NODE_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: CSI_ENDPOINT
+              value: unix:///csi/csi.sock
+          ports:
+            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
+              name: healthz
+              protocol: TCP
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /healthz
+              port: healthz
+            initialDelaySeconds: 30
+            timeoutSeconds: 10
+            periodSeconds: 30
+          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
+          volumeMounts:
+            - name: socket-dir
+              mountPath: /csi
+            - name: pods-mount-dir
+              mountPath: {{ .Values.kubeletDir }}/pods
+              mountPropagation: "Bidirectional"
+          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
+      volumes:
+        - name: socket-dir
+          hostPath:
+            path: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin
+            type: DirectoryOrCreate
+        - name: pods-mount-dir
+          hostPath:
+            path: {{ .Values.kubeletDir }}/pods
+            type: Directory
+        - hostPath:
+            path: {{ .Values.kubeletDir }}/plugins_registry
+            type: Directory
+          name: registration-dir
diff --git a/charts/v4.2.0/csi-driver-nfs/templates/rbac-csi-nfs.yaml b/charts/v4.2.0/csi-driver-nfs/templates/rbac-csi-nfs.yaml
new file mode 100644
index 00000000..bc94431d
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/templates/rbac-csi-nfs.yaml
@@ -0,0 +1,64 @@
+{{- if .Values.serviceAccount.create -}}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-{{ .Values.rbac.name }}-controller-sa
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-{{ .Values.rbac.name }}-node-sa
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+---
+{{- end }}
+
+{{ if .Values.rbac.create -}}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+{{ include "nfs.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.rbac.name }}-csi-provisioner-binding
+{{ include "nfs.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: csi-{{ .Values.rbac.name }}-controller-sa
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.name }}-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+{{- end -}}
diff --git a/charts/v4.2.0/csi-driver-nfs/values.yaml b/charts/v4.2.0/csi-driver-nfs/values.yaml
new file mode 100644
index 00000000..f5c33311
--- /dev/null
+++ b/charts/v4.2.0/csi-driver-nfs/values.yaml
@@ -0,0 +1,116 @@
+customLabels: {}
+image:
+    nfs:
+        repository: registry.k8s.io/sig-storage/nfsplugin
+        tag: v4.2.0
+        pullPolicy: IfNotPresent
+    csiProvisioner:
+        repository: registry.k8s.io/sig-storage/csi-provisioner
+        tag: v3.3.0
+        pullPolicy: IfNotPresent
+    livenessProbe:
+        repository: registry.k8s.io/sig-storage/livenessprobe
+        tag: v2.8.0
+        pullPolicy: IfNotPresent
+    nodeDriverRegistrar:
+        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
+        tag: v2.6.2
+        pullPolicy: IfNotPresent
+
+serviceAccount:
+  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
+  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
+
+rbac:
+  create: true
+  name: nfs
+
+driver:
+  name: nfs.csi.k8s.io
+  mountPermissions: 0
+
+feature:
+  enableFSGroupPolicy: true
+  enableInlineVolume: false
+
+kubeletDir: /var/lib/kubelet
+
+controller:
+  name: csi-nfs-controller
+  replicas: 1
+  strategyType: Recreate
+  runOnMaster: false
+  runOnControlPlane: false
+  livenessProbe:
+    healthPort: 29652
+  logLevel: 5
+  workingMountDir: "/tmp"
+  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+  affinity: {}
+  nodeSelector: {}
+  tolerations:
+    - key: "node-role.kubernetes.io/master"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/controlplane"
+      operator: "Exists"
+      effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/control-plane"
+      operator: "Exists"
+      effect: "NoSchedule"
+  resources:
+    csiProvisioner:
+      limits:
+        memory: 400Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nfs:
+      limits:
+        memory: 200Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+
+node:
+  name: csi-nfs-node
+  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+  maxUnavailable: 1
+  logLevel: 5
+  livenessProbe:
+    healthPort: 29653
+  affinity: {}
+  nodeSelector: {}
+  tolerations:
+    - operator: "Exists"
+  resources:
+    livenessProbe:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nodeDriverRegistrar:
+      limits:
+        memory: 100Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+    nfs:
+      limits:
+        memory: 300Mi
+      requests:
+        cpu: 10m
+        memory: 20Mi
+
+## Reference to one or more secrets to be used when pulling images
+## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+##
+imagePullSecrets: []
+# - name: "image-pull-secret"