.github/PULL_REQUEST_TEMPLATE.md

@@ -36,5 +36,5 @@ If yes, a release note is required:
 Enter your extended release note in the block below. If the PR requires additional action from users switching to the new release, include the string "action required".
 -->
 ```release-note
-none
+
 ```

.github/workflows/codeql-analysis.yml

@@ -1,66 +0,0 @@
-# For most projects, this workflow file will not need changing; you simply need
-# to commit it to your repository.
-#
-# You may wish to alter this file to override the set of languages analyzed,
-# or to provide custom queries or build logic.
-#
-# ******** NOTE ********
-# We have attempted to detect the languages in your repository. Please check
-# the `language` matrix defined below to confirm you have the correct set of
-# supported CodeQL languages.
-#
-name: "CodeQL"
-
-on:
-  push:
-    branches: [ master, 'release-**' ]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ master, 'release-**' ]
-  schedule:
-    - cron: '0 */24 * * *'
-
-jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: [ 'go' ]
-        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
-        # Learn more about CodeQL language support at https://git.io/codeql-language-support
-
-    steps:
-    - name: Set up Go 1.x
-      uses: actions/setup-go@v2
-      with:
-        go-version: ^1.18
-      id: go
-
-    - name: Checkout repository
-      uses: actions/checkout@v3
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
-      with:
-        languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        # queries: ./path/to/local/query, your-org/your-repo/queries@main
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      run: |
-        make all
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1

.github/workflows/codespell.yml

@@ -1,15 +0,0 @@
-# GitHub Action to automate the identification of common misspellings in text files.
-# https://github.com/codespell-project/actions-codespell
-# https://github.com/codespell-project/codespell
-name: codespell
-on: [push, pull_request]
-jobs:
-  codespell:
-    name: Check for spelling errors
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: codespell-project/actions-codespell@master
-        with:
-          check_filenames: true
-          skip: ./.git,./.github/workflows/codespell.yml,.git,*.png,*.jpg,*.svg,*.sum,./vendor,go.sum,./release-tools/prow.sh

.github/workflows/darwin.yaml

@@ -1,7 +1,9 @@
 name: Darwin
 on:
-    pull_request: {}
+  push:
-    push: {}
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
 jobs:
   build:
     name: Unit Tests
@@ -10,11 +12,9 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v2
       with:
-        go-version: ^1.16
+        go-version: ^1.13
       id: go
     - name: Check out code into the Go module directory
       uses: actions/checkout@v2
     - name: Run unit tests
-      run: |
+      run: go test -v -race ./pkg/...
-        go version
-        go test -v -race ./pkg/...

.github/workflows/linux.yaml

@@ -1,35 +0,0 @@
-name: Linux Unit tests
-on:
-    pull_request: {}
-    push: {}
-
-jobs:
-
-  build:
-    name: Build
-    runs-on: ubuntu-latest
-    steps:
-
-    - name: Set up Go 1.x
-      uses: actions/setup-go@v2
-      with:
-        go-version: ^1.17
-      id: go
-
-    - name: Check out code into the Go module directory
-      uses: actions/checkout@v2
-
-    - name: Build Test
-      run: |
-        go version
-        export PATH=$PATH:$HOME/.local/bin
-        make verify
-        go test -covermode=count -coverprofile=profile.cov ./pkg/...
-        export DOCKER_CLI_EXPERIMENTAL=enabled && make container
-
-    - name: Send coverage
-      env:
-        COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      run: |
-        GO111MODULE=off go get github.com/mattn/goveralls
-        $(go env GOPATH)/bin/goveralls -coverprofile=profile.cov -service=github

.github/workflows/pluto.yaml

@@ -1,26 +0,0 @@
-name: k8s api version check
-on:
-    pull_request: {}
-    push: {}
-
-jobs:
-
-  build:
-    name: Build
-    runs-on: ubuntu-latest
-    steps:
-
-    - name: Checkout
-      uses: actions/checkout@v2
-
-    # https://pluto.docs.fairwinds.com/advanced/#display-options
-    - name: Download pluto
-      uses: FairwindsOps/pluto/github-action@master
-
-    - name: Check deploy folder
-      run: |
-        pluto detect-files -d deploy
-
-    - name: Check example folder
-      run: |
-        pluto detect-files -d deploy/example

.github/workflows/sanity.yaml

@@ -0,0 +1,16 @@
+name: Sanity Tests
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    branches: [ master ]
+jobs:
+  test:
+    name: Sanity tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+      - name: Run tests
+        run: |
+          sudo make sanity-test

.github/workflows/shellcheck.yaml

@@ -1,29 +0,0 @@
-name: ShellCheck
-on:
-  push:
-    tags:
-      - v*
-    branches:
-      - master
-      - release-*
-  pull_request:
-    branches:
-      - master
-      - release-*
-
-jobs:
-  shellcheck:
-    name: Shellcheck
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2
-    - name: Run ShellCheck
-      uses: ludeeus/action-shellcheck@master
-      env:
-         SHELLCHECK_OPTS: -e SC2034
-      with:
-        severity: warning
-        check_together: 'yes'
-        disable_matcher: false
-        ignore_paths: vendor release-tools hack
-        format: gcc

.github/workflows/static.yaml

@@ -4,23 +4,17 @@ on:
     push: {}
 jobs:
     go_lint:
-        name: Go Lint
+        # Enable once https://github.com/kubernetes-csi/csi-driver-nfs/issues/90 is fixed
-        runs-on: ubuntu-latest
+        # name: Go Lint
-        steps:
+        # runs-on: ubuntu-18.04
-            - name: Checkout code
+        # steps:
-              uses: actions/checkout@master
+        #     - name: Checkout code
-            - name: Run linter
+        #       uses: actions/checkout@master
-              uses: golangci/golangci-lint-action@v2
+        #     - name: Run linter
-              with:
+        #       uses: golangci/golangci-lint-action@v1
-                  version: v1.45
+        #       with:
-                  args: -E=gofmt,deadcode,unused,varcheck,ineffassign,revive,misspell,exportloopref,asciicheck,bodyclose,contextcheck --timeout=30m0s
+        #           version: v1.29
-    verify-helm:
+        #           args: -E=gofmt,golint,misspell --timeout=30m0s
-        name: Verify Helm
-        runs-on: ubuntu-latest
-        steps:
-            - name: Checkout code
-              uses: actions/checkout@master
             - name: Verify Helm
               run: |
-                sudo snap install yq
+                hack/verify-helm-chart.sh
-                sudo hack/verify-helm-chart.sh

.github/workflows/trivy.yaml

@@ -1,40 +0,0 @@
-name: Trivy vulnerability scanner
-on:
-  push:
-    branches:
-      - master
-  pull_request:
-jobs:
-  build:
-    name: Build
-    runs-on: ubuntu-18.04
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-
-      - name: Install go
-        uses: actions/setup-go@v2
-        with:
-          go-version: ^1.16
-      
-      - name: Build an image from Dockerfile
-        run: |
-          export PUBLISH=true
-          export REGISTRY=test
-          export IMAGE_VERSION=latest
-          export DOCKER_CLI_EXPERIMENTAL=enabled
-          export ARCH=amd64
-          go version
-          make nfs
-          make container-build
-
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
-        with:
-          image-ref: 'test/nfsplugin:latest-linux-amd64'
-          format: 'table'
-          exit-code: '1'
-          ignore-unfixed: true
-          vuln-type: 'os,library'
-          severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
-

.github/workflows/windows.yaml

@@ -1,22 +0,0 @@
-name: Windows Tests
-on:
-    pull_request: {}
-    push: {}
-jobs:
-  build:
-    strategy:
-      matrix:
-        go: [ '^1.16' ]
-        platform: [windows-latest]
-    runs-on: ${{ matrix.platform }}
-    steps:
-      - name: Install Go
-        uses: actions/setup-go@v2
-        with:
-          go-version: ${{ matrix.go }}
-      - name: Checkout code
-        uses: actions/checkout@v2
-      - name: Run Windows Unit Tests
-        run: |
-          go version
-          go test -v -race ./pkg/...

.prow.sh

@@ -1,5 +1,3 @@
-#! /bin/bash
-
 # Copyright 2020 The Kubernetes Authors.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -14,6 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+#! /bin/bash
+
 # A Prow job can override these defaults, but this shouldn't be necessary.
 
 # Only these tests make sense for csi-driver-nfs until we can integrate k/k
@@ -22,7 +22,4 @@
 
 . release-tools/prow.sh
 
-./release-tools/verify-boilerplate.sh "$(pwd)"
-./release-tools/verify-spelling.sh "$(pwd)"
-
 main

Dockerfile

@@ -12,12 +12,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM registry.k8s.io/build-image/debian-base:bullseye-v1.2.0
+FROM centos:latest
 
-ARG ARCH
+# Copy nfsplugin from build _output directory
-ARG binary=./bin/${ARCH}/nfsplugin
+COPY bin/nfsplugin /nfsplugin
-COPY ${binary} /nfsplugin
 
-RUN apt update && apt upgrade -y && apt-mark unhold libcap2 && clean-install ca-certificates mount nfs-common netbase
+RUN yum -y install nfs-utils epel-release jq && yum clean all
 
 ENTRYPOINT ["/nfsplugin"]

Makefile

@@ -13,7 +13,7 @@
 # limitations under the License.
 
 CMDS=nfsplugin
-DEPLOY_FOLDER = ./deploy
+DEPLOY_FOLDER = ./deploy/kubernetes
 CMDS=nfsplugin
 PKG = github.com/kubernetes-csi/csi-driver-nfs
 GINKGO_FLAGS = -ginkgo.v
@@ -24,34 +24,19 @@ DOCKER_CLI_EXPERIMENTAL = enabled
 export GOPATH GOBIN GO111MODULE DOCKER_CLI_EXPERIMENTAL
 
 include release-tools/build.make
-
+LDFLAGS = "-X ${PKG}/pkg/nfs.driverVersion=${IMAGE_VERSION} -s -w -extldflags '-static'"
-GIT_COMMIT = $(shell git rev-parse HEAD)
+GIT_COMMIT ?= $(shell git rev-parse HEAD)
-BUILD_DATE = $(shell date -u +"%Y-%m-%dT%H:%M:%SZ")
+IMAGE_VERSION ?= v0.5.0
-IMAGE_VERSION ?= v4.1.0
-LDFLAGS = -X ${PKG}/pkg/nfs.driverVersion=${IMAGE_VERSION} -X ${PKG}/pkg/nfs.gitCommit=${GIT_COMMIT} -X ${PKG}/pkg/nfs.buildDate=${BUILD_DATE}
-EXT_LDFLAGS = -s -w -extldflags "-static"
 # Use a custom version for E2E tests if we are testing in CI
 ifdef CI
 ifndef PUBLISH
 override IMAGE_VERSION := e2e-$(GIT_COMMIT)
 endif
 endif
-IMAGENAME ?= nfsplugin
+IMAGE_NAME = nfsplugin
 REGISTRY ?= andyzhangx
-REGISTRY_NAME ?= $(shell echo $(REGISTRY) | sed "s/.azurecr.io//g")
+REGISTRY_NAME = $(shell echo $(REGISTRY) | sed "s/.azurecr.io//g")
-IMAGE_TAG = $(REGISTRY)/$(IMAGENAME):$(IMAGE_VERSION)
+IMAGE_TAG = $(REGISTRY)/$(IMAGE_NAME):$(IMAGE_VERSION)
-IMAGE_TAG_LATEST = $(REGISTRY)/$(IMAGENAME):latest
-
-E2E_HELM_OPTIONS ?= --set image.nfs.repository=$(REGISTRY)/$(IMAGENAME) --set image.nfs.tag=$(IMAGE_VERSION) --set image.nfs.pullPolicy=Always --set feature.enableInlineVolume=true
-E2E_HELM_OPTIONS += ${EXTRA_HELM_OPTIONS}
-
-# Output type of docker buildx build
-OUTPUT_TYPE ?= docker
-
-ALL_ARCH.linux = arm64 amd64 ppc64le
-ALL_OS_ARCH = linux-arm64 linux-arm-v7 linux-amd64 linux-ppc64le
-
-.EXPORT_ALL_VARIABLES:
 
 all: nfs
 
@@ -76,65 +61,39 @@ local-build-push: nfs
 	docker build -t $(LOCAL_USER)/nfsplugin:latest .
 	docker push $(LOCAL_USER)/nfsplugin
 
+.PHONY: local-k8s-install
+local-k8s-install:
+	echo "Instlling locally"
+	kubectl apply -f $(DEPLOY_FOLDER)/rbac-csi-nfs-controller.yaml
+	kubectl apply -f $(DEPLOY_FOLDER)/csi-nfs-driverinfo.yaml
+	kubectl apply -f $(DEPLOY_FOLDER)/csi-nfs-controller.yaml
+	kubectl apply -f $(DEPLOY_FOLDER)/csi-nfs-node.yaml
+	echo "Successfully installed"
+
+.PHONY: local-k8s-uninstall
+local-k8s-uninstall:
+	echo "Uninstalling driver"
+	kubectl delete -f $(DEPLOY_FOLDER)/csi-nfs-controller.yaml --ignore-not-found
+	kubectl delete -f $(DEPLOY_FOLDER)/csi-nfs-node.yaml --ignore-not-found
+	kubectl delete -f $(DEPLOY_FOLDER)/csi-nfs-driverinfo.yaml --ignore-not-found
+	kubectl delete -f $(DEPLOY_FOLDER)/rbac-csi-nfs-controller.yaml --ignore-not-found
+	echo "Uninstalled NFS driver"
+
 .PHONY: nfs
 nfs:
-	CGO_ENABLED=0 GOOS=linux GOARCH=$(ARCH) go build -a -ldflags "${LDFLAGS} ${EXT_LDFLAGS}" -mod vendor -o bin/${ARCH}/nfsplugin ./cmd/nfsplugin
+	CGO_ENABLED=0 GOOS=linux go build -a -ldflags ${LDFLAGS} -mod vendor -o bin/nfsplugin ./cmd/nfsplugin
-
-.PHONY: nfs-armv7
-nfs-armv7:
-	CGO_ENABLED=0 GOOS=linux GOARCH=arm GOARM=7 go build -a -ldflags "${LDFLAGS} ${EXT_LDFLAGS}" -mod vendor -o bin/arm/v7/nfsplugin ./cmd/nfsplugin
-
-.PHONY: container-build
-container-build:
-	docker buildx build --pull --output=type=$(OUTPUT_TYPE) --platform="linux/$(ARCH)" \
-		-t $(IMAGE_TAG)-linux-$(ARCH) --build-arg ARCH=$(ARCH) .
-
-.PHONY: container-linux-armv7
-container-linux-armv7:
-	docker buildx build --pull --output=type=$(OUTPUT_TYPE) --platform="linux/arm/v7" \
-		-t $(IMAGE_TAG)-linux-arm-v7 --build-arg ARCH=arm/v7 .
 
 .PHONY: container
-container:
+container: nfs
-	docker buildx rm container-builder || true
+	docker build --no-cache -t $(IMAGE_TAG) .
-	docker buildx create --use --name=container-builder
-	# enable qemu for arm64 build
-	# https://github.com/docker/buildx/issues/464#issuecomment-741507760
-	docker run --privileged --rm tonistiigi/binfmt --uninstall qemu-aarch64
-	docker run --rm --privileged tonistiigi/binfmt --install all
-	for arch in $(ALL_ARCH.linux); do \
-		ARCH=$${arch} $(MAKE) nfs; \
-		ARCH=$${arch} $(MAKE) container-build; \
-	done
-	$(MAKE) nfs-armv7
-	$(MAKE) container-linux-armv7
 
 .PHONY: push
 push:
-ifdef CI
-	docker manifest create --amend $(IMAGE_TAG) $(foreach osarch, $(ALL_OS_ARCH), $(IMAGE_TAG)-${osarch})
-	docker manifest push --purge $(IMAGE_TAG)
-	docker manifest inspect $(IMAGE_TAG)
-else
 	docker push $(IMAGE_TAG)
-endif
-
-.PHONY: push-latest
-push-latest:
-ifdef CI
-	docker manifest create --amend $(IMAGE_TAG_LATEST) $(foreach osarch, $(ALL_OS_ARCH), $(IMAGE_TAG)-${osarch})
-	docker manifest push --purge $(IMAGE_TAG_LATEST)
-	docker manifest inspect $(IMAGE_TAG_LATEST)
-else
-	docker tag $(IMAGE_TAG) $(IMAGE_TAG_LATEST)
-	docker push $(IMAGE_TAG_LATEST)
-endif
 
 .PHONY: install-nfs-server
 install-nfs-server:
-	kubectl apply -f ./deploy/example/nfs-provisioner/nfs-server.yaml
+	kubectl apply -f ./examples/nfs-server.yaml
-	kubectl delete secret mount-options --ignore-not-found
-	kubectl create secret generic mount-options --from-literal mountOptions="nfsvers=4.1"
 
 .PHONY: install-helm
 install-helm:
@@ -142,12 +101,11 @@ install-helm:
 
 .PHONY: e2e-bootstrap
 e2e-bootstrap: install-helm
-	OUTPUT_TYPE=registry $(MAKE) container push
+	docker pull $(IMAGE_TAG) || make container push
 	helm install csi-driver-nfs ./charts/latest/csi-driver-nfs --namespace kube-system --wait --timeout=15m -v=5 --debug \
-		${E2E_HELM_OPTIONS} \
+	--set image.nfs.repository=$(REGISTRY)/$(IMAGE_NAME) \
-		--set controller.dnsPolicy=ClusterFirstWithHostNet \
+	--set image.nfs.tag=$(IMAGE_VERSION) \
-		--set controller.logLevel=8 \
+	--set image.nfs.pullPolicy=Always
-		--set node.logLevel=8
 
 .PHONY: e2e-teardown
 e2e-teardown:
@@ -155,8 +113,10 @@ e2e-teardown:
 
 .PHONY: e2e-test
 e2e-test:
-	if [ ! -z "$(EXTERNAL_E2E_TEST)" ]; then \
+	go test -v -timeout=0 ./test/e2e ${GINKGO_FLAGS}
-		bash ./test/external-e2e/run.sh;\
+
-	else \
+.PHONY: create-example-deployment
-		go test -v -timeout=0 ./test/e2e ${GINKGO_FLAGS};\
+create-example-deployment:
-	fi
+	kubectl apply -f ./examples/storageclass-nfs.yaml
+	kubectl apply -f ./examples/deployment.yaml
+	kubectl apply -f ./examples/statefulset.yaml

OWNERS

@@ -1,7 +1,10 @@
 # See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
 
 approvers:
-- kubernetes-csi-approvers
 - andyzhangx
+- msau42
+- saad-ali
 reviewers:
-- kubernetes-csi-reviewers
+- andyzhangx
+- msau42
+- saad-ali

OWNERS_ALIASES

@@ -1 +0,0 @@
-release-tools/KUBERNETES_CSI_OWNERS_ALIASES

README.md

@@ -1,40 +1,88 @@
-# NFS CSI driver for Kubernetes
+# CSI NFS driver
-![build status](https://github.com/kubernetes-csi/csi-driver-nfs/actions/workflows/linux.yaml/badge.svg)
-[![Coverage Status](https://coveralls.io/repos/github/kubernetes-csi/csi-driver-nfs/badge.svg?branch=master)](https://coveralls.io/github/kubernetes-csi/csi-driver-nfs?branch=master)
 
-### Overview
+## Overview
 
-This is a repository for [NFS](https://en.wikipedia.org/wiki/Network_File_System) [CSI](https://kubernetes-csi.github.io/docs/) driver, csi plugin name: `nfs.csi.k8s.io`. This driver requires existing and already configured NFSv3 or NFSv4 server, it supports dynamic provisioning of Persistent Volumes via Persistent Volume Claims by creating a new sub directory under NFS server.
+This is a repository for [NFS](https://en.wikipedia.org/wiki/Network_File_System) [CSI](https://kubernetes-csi.github.io/docs/) Driver.
+Currently it implements bare minimum of the [CSI spec](https://github.com/container-storage-interface/spec) and is in the alpha state 
+of the development.
 
-### Project status: GA
+#### CSI Feature matrix
 
-### Container Images & Kubernetes Compatibility:
+| **nfs.csi.k8s.io** | K8s version compatibility | CSI versions compatibility | Dynamic Provisioning | Resize | Snapshots | Raw Block | AccessModes              | Status                                                                       |
-|driver version  | supported k8s version | status |
+|--------------------|---------------------------|----------------------------|----------------------|--------|-----------|-----------|--------------------------|------------------------------------------------------------------------------|
-|----------------|-----------------------|--------|
+|master              | 1.14 +                    | v1.0 +                     |  no                  |  no    |  no       |  no       | Read/Write Multiple Pods | Alpha                                                                        |
-|master branch   | 1.20+                 | GA     |
+|v2.0.0              | 1.14 +                    | v1.0 +                     |  no                  |  no    |  no       |  no       | Read/Write Multiple Pods | Alpha                                                                        |
-|v4.0.0          | 1.10+                 | GA     |
+|v1.0.0              | 1.9 - 1.15                | v1.0                       |  no                  |  no    |  no       |  no       | Read/Write Multiple Pods | [deprecated](https://github.com/kubernetes-csi/drivers/tree/master/pkg/nfs)  |
-|v3.1.0          | 1.19+                 | beta   |
-|v3.0.0          | 1.19+                 | beta   |
-|v2.0.0          | 1.14+                 | alpha  |
 
-### Install driver on a Kubernetes cluster
+## Requirements
- - install by [kubectl](./docs/install-nfs-csi-driver.md)
- - install by [helm charts](./charts)
 
-### Driver parameters
+The CSI NFS driver requires Kubernetes cluster of version 1.14 or newer and 
-Please refer to [`nfs.csi.k8s.io` driver parameters](./docs/driver-parameters.md)
+preexisting NFS server, whether it is deployed on cluster or provisioned 
+independently. The plugin itself provides only a communication layer between 
+resources in the cluser and the NFS server.
 
-### Examples
+## Install NFS CSI driver on a kubernetes cluster
- - [Basic usage](./deploy/example/README.md)
+Please refer to [install NFS CSI driver](https://github.com/kubernetes-csi/csi-driver-nfs/blob/master/docs/install-csi-driver.md).
- - [fsGroupPolicy](./deploy/example/fsgroup)
 
-### Troubleshooting
+## Example
- - [CSI driver troubleshooting guide](./docs/csi-debug.md) 
 
-## Kubernetes Development
+There are multiple ways to create a kubernetes cluster, the NFS CSI plugin
-Please refer to [development guide](./docs/csi-dev.md)
+should work invariantly of your cluster setup. Very simple way of getting
+a local environment for testing can be achieved using for example
+[kind](https://github.com/kubernetes-sigs/kind).
 
-### Community, discussion, contribution, and support
+There are also multiple different NFS servers you can use for testing of 
+the plugin, the major versions of the protocol v2, v3 and v4 should be supported
+by the current implementation.
+
+The example assumes you have your cluster created (e.g. `kind create cluster`)
+and working NFS server (e.g. https://github.com/rootfs/nfs-ganesha-docker)
+
+#### Deploy
+
+Deploy the NFS plugin along with the `CSIDriver` info.
+```console
+kubectl create -f deploy/kubernetes
+```
+
+#### Example Nginx application
+
+The [/examples/kubernetes/nginx.yaml](/examples/kubernetes/nginx.yaml) contains a `PersistentVolume`,
+`PersistentVolumeClaim` and an nginx `Pod` mounting the NFS volume under `/var/www`.
+
+You will need to update the NFS Server IP and the share information under 
+`volumeAttributes` inside `PersistentVolume` in `nginx.yaml` file to match your
+NFS server public end point and configuration. You can also provide additional 
+`mountOptions`, such as protocol version, in the `PersistentVolume` `spec` 
+relevant for your NFS Server.
+
+```console
+kubectl create -f examples/kubernetes/nginx.yaml
+```
+
+## Running Kubernetes End To End tests on an NFS Driver
+
+First, stand up a local cluster `ALLOW_PRIVILEGED=1 hack/local-up-cluster.sh` (from your Kubernetes repo)
+For Fedora/RHEL clusters, the following might be required:
+```console
+sudo chown -R $USER:$USER /var/run/kubernetes/
+sudo chown -R $USER:$USER /var/lib/kubelet
+sudo chcon -R -t svirt_sandbox_file_t /var/lib/kubelet
+```
+If you are plannig to test using your own private image, you could either install your nfs driver using your own set of YAML files, or edit the existing YAML files to use that private image.
+
+When using the [existing set of YAML files](https://github.com/kubernetes-csi/csi-driver-nfs/tree/master/deploy/kubernetes), you would edit [csi-nfs-node.yaml](https://github.com/kubernetes-csi/csi-driver-nfs/blob/master/deploy/kubernetes/csi-nfs-node.yaml#L45) files to include your private image instead of the default one. After editing these files, skip to step 3 of the following steps.
+
+If you already have a driver installed, skip to step 4 of the following steps.
+
+1) Build the nfs driver by running `make`
+2) Create NFS Driver Image, where the image tag would be whatever that is required by your YAML deployment files        `docker build -t quay.io/k8scsi/nfsplugin:v2.0.0 .`
+3) Install the Driver: `kubectl create -f deploy/kubernetes`
+4) Build E2E test binary: `make build-tests`
+5) Run E2E Tests using the following command: `./bin/tests --ginkgo.v --ginkgo.progress --kubeconfig=/var/run/kubernetes/admin.kubeconfig`
+
+
+## Community, discussion, contribution, and support
 
 Learn how to engage with the Kubernetes community on the [community page](http://kubernetes.io/community/).
 
@@ -43,6 +91,7 @@ You can reach the maintainers of this project at:
 - [Slack channel](https://kubernetes.slack.com/messages/sig-storage)
 - [Mailing list](https://groups.google.com/forum/#!forum/kubernetes-sig-storage)
 
+
 ### Code of conduct
 
 Participation in the Kubernetes community is governed by the [Kubernetes Code of Conduct](code-of-conduct.md).

charts/README.md

@@ -1,92 +1,63 @@
-# Install CSI driver with Helm 3
+# Installation with Helm 3
+
+Follow this guide to install the NFS Driver for Kubernetes.
 
 ## Prerequisites
- - [install Helm](https://helm.sh/docs/intro/quickstart/#install-helm)
 
-### Tips
+- [Install Helm 3](https://helm.sh/docs/intro/quickstart/#install-helm)
- - make controller only run on master node: `--set controller.runOnMaster=true`
- - set replica of controller as `2`: `--set controller.replicas=2`
 
-### install a specific version
+## Install via `helm install`
-```console
+
-helm repo add csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+```
-helm install csi-driver-nfs csi-driver-nfs/csi-driver-nfs --namespace kube-system --version v4.0.0
+$ cd charts/latest
+$ helm install csi-driver-nfs ./csi-driver-nfs -n kube-system
+```
+## Install via Helm repository
+
+```
+$ helm repo add csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+$ helm install --name csi-driver-nfs csi-driver-nfs/csi-driver-nfs --namespace kube-system
 ```
 
-### install driver with customized driver name, deployment name
+### Search for available versions
-> only supported from `v3.1.0`+
+
- - following example would install a driver with name `nfs2`
+```
-```console
+$ helm search repo -l csi-driver-nfs
-helm install csi-driver-nfs2 csi-driver-nfs/csi-driver-nfs --namespace kube-system --set driver.name="nfs2.csi.k8s.io" --set controller.name="csi-nfs2-controller" --set rbac.name=nfs2 --set serviceAccount.controller=csi-nfs2-controller-sa --set serviceAccount.node=csi-nfs2-node-sa --set node.name=csi-nfs2-node --set node.livenessProbe.healthPort=39653
 ```
 
-### search for all available chart versions
+### Install a specific version
-```console
+
-helm search repo -l csi-driver-nfs
+```
+https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts --version v2.0.0
 ```
 
-## uninstall CSI driver
+## Chart configuration
-```console
-helm uninstall csi-driver-nfs -n kube-system
-```
 
-## latest chart configuration
+The following table lists the configurable parameters of the latest NFS CSI Driver chart and their default values.
-
-The following table lists the configurable parameters of the latest NFS CSI Driver chart and default values.
 
 | Parameter                                         | Description                                                | Default                                                           |
 |---------------------------------------------------|------------------------------------------------------------|-------------------------------------------------------------------|
-| `driver.name`                                     | alternative driver name                                    | `nfs.csi.k8s.io` |
+| `image.nfs.repository`                            | csi-driver-nfs docker image                                | mcr.microsoft.com/k8s/csi/nfs-csi                                 |
-| `driver.mountPermissions`                         | mounted folder permissions name                            | `0777`
+| `image.nfs.tag`                                   | csi-driver-nfs docker image tag                            | latest                                                            |
-| `feature.enableFSGroupPolicy`                     | enable `fsGroupPolicy` on a k8s 1.20+ cluster              | `true`                      |
+| `image.nfs.pullPolicy`                            | csi-driver-nfs image pull policy                           | IfNotPresent                                                      |
-| `feature.enableInlineVolume`                      | enable inline volume                     | `false`                      |
+| `image.csiProvisioner.repository`                 | csi-provisioner docker image                               | mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner              |
-| `kubeletDir`                                      | alternative kubelet directory                              | `/var/lib/kubelet`                                                  |
+| `image.csiProvisioner.tag`                        | csi-provisioner docker image tag                           | v1.4.0                                                            |
-| `image.nfs.repository`                            | csi-driver-nfs image                                       | `registry.k8s.io/sig-storage/nfsplugin`                          |
+| `image.csiProvisioner.pullPolicy`                 | csi-provisioner image pull policy                          | IfNotPresent                                                      |
-| `image.nfs.tag`                                   | csi-driver-nfs image tag                                   | `latest`                                                |
+| `image.livenessProbe.repository`                  | liveness-probe docker image                                | mcr.microsoft.com/oss/kubernetes-csi/livenessprobe                |
-| `image.nfs.pullPolicy`                            | csi-driver-nfs image pull policy                           | `IfNotPresent`                                                      |
+| `image.livenessProbe.tag`                         | liveness-probe docker image tag                            | v1.1.0                                                            |
-| `image.csiProvisioner.repository`                 | csi-provisioner docker image                               | `registry.k8s.io/sig-storage/csi-provisioner`                            |
+| `image.livenessProbe.pullPolicy`                  | liveness-probe image pull policy                           | IfNotPresent                                                      |
-| `image.csiProvisioner.tag`                        | csi-provisioner docker image tag                           | `v3.1.0`                                                            |
+| `image.nodeDriverRegistrar.repository`            | csi-node-driver-registrar docker image                     | mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar    |
-| `image.csiProvisioner.pullPolicy`                 | csi-provisioner image pull policy                          | `IfNotPresent`                                                      |
+| `image.nodeDriverRegistrar.tag`                   | csi-node-driver-registrar docker image tag                 | v1.2.0                                                            |
-| `image.livenessProbe.repository`                  | liveness-probe docker image                                | `registry.k8s.io/sig-storage/livenessprobe`                              |
+| `image.nodeDriverRegistrar.pullPolicy`            | csi-node-driver-registrar image pull policy                | IfNotPresent                                                      |
-| `image.livenessProbe.tag`                         | liveness-probe docker image tag                            | `v2.6.0`                                                            |
+| `serviceAccount.create`                           | whether create service account of csi-nfs-controller       | true                                                              |
-| `image.livenessProbe.pullPolicy`                  | liveness-probe image pull policy                           | `IfNotPresent`                                                      |
+| `rbac.create`                                     | whether create rbac of csi-nfs-controller                  | true                                                              |
-| `image.nodeDriverRegistrar.repository`            | csi-node-driver-registrar docker image                     | `registry.k8s.io/sig-storage/csi-node-driver-registrar`                  |
+| `controller.replicas`                             | the replicas of csi-nfs-controller                                  | 2                                                   |
-| `image.nodeDriverRegistrar.tag`                   | csi-node-driver-registrar docker image tag                 | `v2.5.0`                                                            |
-| `image.nodeDriverRegistrar.pullPolicy`            | csi-node-driver-registrar image pull policy                | `IfNotPresent`                                                      |
-| `imagePullSecrets`                                | Specify docker-registry secret names as an array           | [] (does not add image pull secrets to deployed pods)                                                           |
-| `serviceAccount.create`                           | whether create service account of csi-nfs-controller       | `true`                                                              |
-| `rbac.create`                                     | whether create rbac of csi-nfs-controller                  | `true`                                                              |
-| `controller.replicas`                             | replica number of csi-nfs-controller                         | `1`                                                                 |
-| `controller.runOnMaster`                          | run controller on master node                              | `false`                                                             |
-| `controller.dnsPolicy`                            | dnsPolicy of controller driver, available values: `Default`, `ClusterFirstWithHostNet`, `ClusterFirst`                              | `Default`                                                             |
-| `controller.logLevel`                             | controller driver log level                                                          |`5`                                                           |
-| `controller.workingMountDir`                      | working directory for provisioner to mount nfs shares temporarily                  | `/tmp`                                                             |
-| `controller.tolerations`                              | controller pod tolerations                            |                                                              |
-| `controller.resources.csiProvisioner.limits.memory`   | csi-provisioner memory limits                         | 100Mi                                                          |
-| `controller.resources.csiProvisioner.requests.cpu`    | csi-provisioner cpu requests limits                   | 10m                                                            |
-| `controller.resources.csiProvisioner.requests.memory` | csi-provisioner memory requests limits                | 20Mi                                                           |
-| `controller.resources.livenessProbe.limits.memory`    | liveness-probe memory limits                          | 100Mi                                                          |
-| `controller.resources.livenessProbe.requests.cpu`     | liveness-probe cpu requests limits                    | 10m                                                            |
-| `controller.resources.livenessProbe.requests.memory`  | liveness-probe memory requests limits                 | 20Mi                                                           |
-| `controller.resources.nfs.limits.memory`              | csi-driver-nfs memory limits                         | 200Mi                                                          |
-| `controller.resources.nfs.requests.cpu`               | csi-driver-nfs cpu requests limits                   | 10m                                                            |
-| `controller.resources.nfs.requests.memory`            | csi-driver-nfs memory requests limits                | 20Mi                                                           |
-| `node.name`                                           | driver node daemonset name                            | `csi-nfs-node`
-| `node.dnsPolicy`                                      | dnsPolicy of driver node daemonset, available values: `Default`, `ClusterFirstWithHostNet`, `ClusterFirst`                              |
-| `node.maxUnavailable`                             | `maxUnavailable` value of driver node daemonset                            | `1`
-| `node.logLevel`                                   | node driver log level                                                          |`5`                                                           |
-| `node.livenessProbe.healthPort `                  | the health check port for liveness probe                    |`29653`                                                           |
-| `node.tolerations`                              | node pod tolerations                            |                                                              |
-| `node.resources.livenessProbe.limits.memory`          | liveness-probe memory limits                          | 100Mi                                                          |
-| `node.resources.livenessProbe.requests.cpu`           | liveness-probe cpu requests limits                    | 10m                                                            |
-| `node.resources.livenessProbe.requests.memory`        | liveness-probe memory requests limits                 | 20Mi                                                           |
-| `node.resources.nodeDriverRegistrar.limits.memory`    | csi-node-driver-registrar memory limits               | 100Mi                                                          |
-| `node.resources.nodeDriverRegistrar.requests.cpu`     | csi-node-driver-registrar cpu requests limits         | 10m                                                            |
-| `node.resources.nodeDriverRegistrar.requests.memory`  | csi-node-driver-registrar memory requests limits      | 20Mi                                                           |
-| `node.resources.nfs.limits.memory`                    | csi-driver-nfs memory limits                         | 300Mi                                                         |
-| `node.resources.nfs.requests.cpu`                     | csi-driver-nfs cpu requests limits                   | 10m                                                            |
-| `node.resources.nfs.requests.memory`                  | csi-driver-nfs memory requests limits                | 20Mi                                                           |
 
-## troubleshooting
+## Troubleshooting
- - Add `--wait -v=5 --debug` in `helm install` command to get detailed error
+
- - Use `kubectl describe` to acquire more info
+If there are some errors when using helm to install, follow the steps to debug:
+
+1. Add `--wait -v=5 --debug` in `helm install` command.
+2. Then the error pods  can be located.
+3. Use `kubectl describe` to acquire more info.
+4. Check the related resource of the pod, such as serviceaacount, rbac, etc.

charts/index.yaml

@@ -2,12 +2,21 @@ apiVersion: v1
 entries:
   csi-driver-nfs:
   - apiVersion: v1
-    appVersion: v4.2.0
+    appVersion: v2.0.0
-    created: "2022-05-06T12:35:56.6991353Z"
+    created: "2020-11-13T16:06:53.1675609+05:30"
     description: CSI NFS Driver for Kubernetes
-    digest: cb537287512ce9f99adaead8cd4904ed7284780bdc44c9b8d6705e66f28bfa5c
+    digest: 0a2a89ad91485b277e53bdf41a58c07dbc0f8910cb63494411e46bf17c4a7196
     name: csi-driver-nfs
     urls:
-    - https://gitea.devindata.com/devindata-public/csi-driver-nfs/raw/branch/master/charts/v4.2.0/csi-driver-nfs-v4.2.0.tgz
+    - https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/v2.0.0/csi-driver-nfs-v2.0.0.tgz
-    version: v4.2.0
+    version: v2.0.0
-generated: "2022-05-06T12:35:56.693722959Z"
+  - apiVersion: v1
+    appVersion: latest
+    created: "2020-11-13T16:06:53.1671254+05:30"
+    description: CSI NFS Driver for Kubernetes
+    digest: 0e85c143ff5bc783089d2439e6b533949916657d50e9267d10b8add3dff027eb
+    name: csi-driver-nfs
+    urls:
+    - https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/latest/csi-driver-nfs-latest.tgz
+    version: latest
+generated: "2020-11-13T16:06:53.1665574+05:30"

charts/latest/csi-driver-nfs/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v1
 appVersion: latest
 description: CSI NFS Driver for Kubernetes
 name: csi-driver-nfs
-version: v4.1.0
+version: latest

charts/latest/csi-driver-nfs/templates/_helpers.tpl

@@ -1,19 +1,11 @@
 {{/* vim: set filetype=mustache: */}}
 
-{{/* Expand the name of the chart.*/}}
-{{- define "nfs.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
 {{/* labels for helm resources */}}
 {{- define "nfs.labels" -}}
 labels:
-  app.kubernetes.io/instance: "{{ .Release.Name }}"
+  heritage: "{{ .Release.Service }}"
-  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
+  release: "{{ .Release.Name }}"
-  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
+  revision: "{{ .Release.Revision }}"
-  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
+  chart: "{{ .Chart.Name }}"
-  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
+  chartVersion: "{{ .Chart.Version }}"
-  {{- if .Values.customLabels }}
-{{ toYaml .Values.customLabels | indent 2 -}}
-  {{- end }}
 {{- end -}}

charts/latest/csi-driver-nfs/templates/csi-nfs-controller.yaml

@@ -2,44 +2,35 @@
 kind: Deployment
 apiVersion: apps/v1
 metadata:
-  name: {{ .Values.controller.name }}
+  name: csi-nfs-controller
   namespace: {{ .Release.Namespace }}
 {{ include "nfs.labels" . | indent 2 }}
 spec:
   replicas: {{ .Values.controller.replicas }}
   selector:
     matchLabels:
-      app: {{ .Values.controller.name }}
+      app: csi-nfs-controller
   template:
     metadata:
 {{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.controller.name }}
+        app: csi-nfs-controller
     spec:
-      {{- if .Values.imagePullSecrets }}
+      serviceAccountName: csi-nfs-controller-sa
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: {{ .Values.controller.dnsPolicy }}
-      serviceAccountName: {{ .Values.serviceAccount.controller }}
       nodeSelector:
         kubernetes.io/os: linux
-        {{- if .Values.controller.runOnMaster}}
-        kubernetes.io/role: master
-        {{- end}}
       priorityClassName: system-cluster-critical
-{{- with .Values.controller.tolerations }}
       tolerations:
-{{ toYaml . | indent 8 }}
+        - key: "node-role.kubernetes.io/master"
-{{- end }}
+          operator: "Equal"
+          value: "true"
+          effect: "NoSchedule"
       containers:
         - name: csi-provisioner
           image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
           args:
-            - "-v=2"
+            - "-v=5"
             - "--csi-address=$(ADDRESS)"
             - "--leader-election"
-            - "--leader-election-namespace={{ .Release.Namespace }}"
           env:
             - name: ADDRESS
               value: /csi/csi.sock
@@ -47,19 +38,31 @@ spec:
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
+          resources:
+            limits:
+              cpu: 100m
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
         - name: liveness-probe
           image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
           args:
             - --csi-address=/csi/csi.sock
             - --probe-timeout=3s
-            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
+            - --health-port=29652
-            - --v=2
+            - --v=5
           imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
-          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
+          resources:
+            limits:
+              cpu: 100m
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
         - name: nfs
           image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
           securityContext:
@@ -69,12 +72,9 @@ spec:
             allowPrivilegeEscalation: true
           imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
           args:
-            - "--v={{ .Values.controller.logLevel }}"
+            - "-v=5"
             - "--nodeid=$(NODE_ID)"
             - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-            - "--working-mount-dir={{ .Values.controller.workingMountDir }}"
           env:
             - name: NODE_ID
               valueFrom:
@@ -82,29 +82,23 @@ spec:
                   fieldPath: spec.nodeName
             - name: CSI_ENDPOINT
               value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
           volumeMounts:
             - name: pods-mount-dir
-              mountPath: {{ .Values.kubeletDir }}/pods
+              mountPath: /var/lib/kubelet/pods
               mountPropagation: "Bidirectional"
             - mountPath: /csi
               name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
+          resources:
+            limits:
+              cpu: 200m
+              memory: 200Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
       volumes:
         - name: pods-mount-dir
           hostPath:
-            path: {{ .Values.kubeletDir }}/pods
+            path: /var/lib/kubelet/pods
             type: Directory
         - name: socket-dir
           emptyDir: {}

charts/latest/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml

@@ -1,15 +1,9 @@
----
+apiVersion: storage.k8s.io/v1beta1
-apiVersion: storage.k8s.io/v1
 kind: CSIDriver
 metadata:
-  name: {{ .Values.driver.name }}
+  name: nfs.csi.k8s.io
 spec:
   attachRequired: false
   volumeLifecycleModes:
     - Persistent
-  {{- if .Values.feature.enableInlineVolume}}
+  podInfoOnMount: true
-    - Ephemeral
-  {{- end}}
-  {{- if .Values.feature.enableFSGroupPolicy}}
-  fsGroupPolicy: File
-  {{- end}}

charts/latest/csi-driver-nfs/templates/csi-nfs-node.yaml

@@ -1,66 +1,52 @@
----
+# This YAML file contains driver-registrar & csi driver nodeplugin API objects
+# that are necessary to run CSI nodeplugin for nfs
 kind: DaemonSet
 apiVersion: apps/v1
 metadata:
-  name: {{ .Values.node.name }}
+  name: csi-nfs-node
   namespace: {{ .Release.Namespace }}
 {{ include "nfs.labels" . | indent 2 }}
 spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: {{ .Values.node.maxUnavailable }}
-    type: RollingUpdate
   selector:
     matchLabels:
-      app: {{ .Values.node.name }}
+      app: csi-nfs-node
   template:
     metadata:
 {{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.node.name }}
+        app: csi-nfs-node
     spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
       hostNetwork: true # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: {{ .Values.controller.dnsPolicy }}
+      dnsPolicy: ClusterFirstWithHostNet
-      serviceAccountName: csi-nfs-node-sa
-      nodeSelector:
-        kubernetes.io/os: linux
-{{- with .Values.node.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
       containers:
         - name: liveness-probe
           image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
           args:
             - --csi-address=/csi/csi.sock
             - --probe-timeout=3s
-            - --health-port={{ .Values.node.livenessProbe.healthPort }}
+            - --health-port=29653
-            - --v=2
+            - --v=5
           imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
-          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
+          resources:
+            limits:
+              cpu: 100m
+              memory: 100Mi
+            requests:
+              cpu: 10m
+              memory: 20Mi
         - name: node-driver-registrar
           image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
-          livenessProbe:
+          lifecycle:
+            preStop:
               exec:
-              command:
+                command: ["/bin/sh", "-c", "rm -rf /registration/csi-nfsplugin /registration/csi-nfsplugin-reg.sock"]
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
           args:
-            - --v=2
+            - --v=5
             - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+            - --kubelet-registration-path=/var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
           env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin/csi.sock
             - name: KUBE_NODE_NAME
               valueFrom:
                 fieldRef:
@@ -71,7 +57,6 @@ spec:
               mountPath: /csi
             - name: registration-dir
               mountPath: /registration
-          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
         - name: nfs
           securityContext:
             privileged: true
@@ -80,11 +65,9 @@ spec:
             allowPrivilegeEscalation: true
           image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
           args :
-            - "--v={{ .Values.node.logLevel }}"
+            - "-v=5"
             - "--nodeid=$(NODE_ID)"
             - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
           env:
             - name: NODE_ID
               valueFrom:
@@ -92,36 +75,23 @@ spec:
                   fieldPath: spec.nodeName
             - name: CSI_ENDPOINT
               value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
           imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
             - name: pods-mount-dir
-              mountPath: {{ .Values.kubeletDir }}/pods
+              mountPath: /var/lib/kubelet/pods
               mountPropagation: "Bidirectional"
-          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
       volumes:
         - name: socket-dir
           hostPath:
-            path: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin
+            path: /var/lib/kubelet/plugins/csi-nfsplugin
             type: DirectoryOrCreate
         - name: pods-mount-dir
           hostPath:
-            path: {{ .Values.kubeletDir }}/pods
+            path: /var/lib/kubelet/pods
             type: Directory
         - hostPath:
-            path: {{ .Values.kubeletDir }}/plugins_registry
+            path: /var/lib/kubelet/plugins_registry
             type: Directory
           name: registration-dir

charts/latest/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml

@@ -0,0 +1,54 @@
+{{- if .Values.serviceAccount.create -}}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: csi-nfs-controller-sa
+  namespace: {{ .Release.Namespace }}
+{{ include "nfs.labels" . | indent 2 }}
+---
+{{- end -}}
+
+{{- if .Values.rbac.create -}}
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: nfs-external-provisioner-role
+{{ include "nfs.labels" . | indent 2 }}
+rules:
+  - apiGroups: [""]
+    resources: ["persistentvolumes"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "list", "watch", "update"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["storageclasses"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: nfs-csi-provisioner-binding
+{{ include "nfs.labels" . | indent 2 }}
+subjects:
+  - kind: ServiceAccount
+    name: csi-nfs-controller-sa
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: nfs-external-provisioner-role
+  apiGroup: rbac.authorization.k8s.io
+{{- end -}}

charts/latest/csi-driver-nfs/templates/rbac-csi-nfs.yaml

@@ -1,64 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-controller-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-node-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-{{- end -}}
-
-{{- if .Values.rbac.create -}}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-{{ include "nfs.labels" . | indent 2 }}
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-csi-provisioner-binding
-{{ include "nfs.labels" . | indent 2 }}
-subjects:
-  - kind: ServiceAccount
-    name: csi-{{ .Values.rbac.name }}-controller-sa
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io
-{{- end -}}

charts/latest/csi-driver-nfs/values.yaml

@@ -1,110 +1,23 @@
-customLabels: {}
 image:
     nfs:
         repository: gcr.io/k8s-staging-sig-storage/nfsplugin
-        tag: canary
+        tag: amd64-linux-canary
         pullPolicy: IfNotPresent
     csiProvisioner:
-        repository: registry.k8s.io/sig-storage/csi-provisioner
+        repository: k8s.gcr.io/sig-storage/csi-provisioner
-        tag: v3.1.0
+        tag: v2.0.4
         pullPolicy: IfNotPresent
     livenessProbe:
-        repository: registry.k8s.io/sig-storage/livenessprobe
+        repository: k8s.gcr.io/sig-storage/livenessprobe
-        tag: v2.7.0
+        tag: v2.1.0
         pullPolicy: IfNotPresent
     nodeDriverRegistrar:
-        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
+        repository: k8s.gcr.io/sig-storage/csi-node-driver-registrar
-        tag: v2.5.1
+        tag: v2.0.1
         pullPolicy: IfNotPresent
-
 serviceAccount:
-  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
+  create: true
-  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
-
 rbac:
   create: true
-  name: nfs
-
-driver:
-  name: nfs.csi.k8s.io
-  mountPermissions: 0777
-
-feature:
-  enableFSGroupPolicy: true
-  enableInlineVolume: false
-
-kubeletDir: /var/lib/kubelet
-
 controller:
-  name: csi-nfs-controller
+  replicas: 2
-  replicas: 1
-  runOnMaster: false
-  livenessProbe:
-    healthPort: 29652
-  logLevel: 5
-  workingMountDir: "/tmp"
-  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-  tolerations:
-    - key: "node-role.kubernetes.io/master"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/controlplane"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/control-plane"
-      operator: "Exists"
-      effect: "NoSchedule"
-  resources:
-    csiProvisioner:
-      limits:
-        memory: 400Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 200Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-node:
-  name: csi-nfs-node
-  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-  maxUnavailable: 1
-  logLevel: 5
-  livenessProbe:
-    healthPort: 29653
-  tolerations:
-    - operator: "Exists"
-  resources:
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nodeDriverRegistrar:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 300Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-## Reference to one or more secrets to be used when pulling images
-## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
-##
-imagePullSecrets: []
-# - name: "image-pull-secret"

charts/v2.0.0/csi-driver-nfs/values.yaml

@@ -4,15 +4,15 @@ image:
         tag: v2.0.0
         pullPolicy:   IfNotPresent
     csiProvisioner:
-        repository: registry.k8s.io/sig-storage/csi-provisioner
+        repository: k8s.gcr.io/sig-storage/csi-provisioner
         tag: v2.0.4
         pullPolicy: IfNotPresent
     livenessProbe:
-        repository: registry.k8s.io/sig-storage/livenessprobe
+        repository: k8s.gcr.io/sig-storage/livenessprobe
         tag: v2.1.0
         pullPolicy: IfNotPresent
     nodeDriverRegistrar:
-        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
+        repository: k8s.gcr.io/sig-storage/csi-node-driver-registrar
         tag: v2.0.1
         pullPolicy: IfNotPresent
 serviceAccount:

charts/v3.0.0/csi-driver-nfs/.helmignore

@@ -1,22 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/

charts/v3.0.0/csi-driver-nfs/Chart.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-appVersion: v3.0.0
-description: CSI NFS Driver for Kubernetes
-name: csi-driver-nfs
-version: v3.0.0

charts/v3.0.0/csi-driver-nfs/templates/NOTES.txt

@@ -1,5 +0,0 @@
- The CSI NFS Driver is getting deployed to your cluster.
-
-To check CSI NFS Driver pods status, please run:
-
-  kubectl --namespace={{ .Release.Namespace }} get pods --selector="release={{ .Release.Name }}" --watch

charts/v3.0.0/csi-driver-nfs/templates/_helpers.tpl

@@ -1,16 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-
-{{/* Expand the name of the chart.*/}}
-{{- define "nfs.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/* labels for helm resources */}}
-{{- define "nfs.labels" -}}
-labels:
-  app.kubernetes.io/instance: "{{ .Release.Name }}"
-  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
-  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
-  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
-  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
-{{- end -}}

charts/v3.0.0/csi-driver-nfs/templates/csi-nfs-controller.yaml

@@ -1,107 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.controller.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  replicas: {{ .Values.controller.replicas }}
-  selector:
-    matchLabels:
-      app: {{ .Values.controller.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.controller.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: ClusterFirstWithHostNet
-      serviceAccountName: {{ .Values.serviceAccount.controller }}
-      nodeSelector:
-        kubernetes.io/os: linux
-        {{- if .Values.controller.runOnMaster}}
-        kubernetes.io/role: master
-        {{- end}}
-      priorityClassName: system-cluster-critical
-{{- with .Values.controller.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: csi-provisioner
-          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
-        - name: nfs
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          args:
-            - "--v={{ .Values.controller.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

charts/v3.0.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: {{ .Values.driver.name }}
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-  {{- if .Values.feature.enableFSGroupPolicy}}
-  fsGroupPolicy: File
-  {{- end}}

charts/v3.0.0/csi-driver-nfs/templates/csi-nfs-node.yaml

@@ -1,126 +0,0 @@
-# This YAML file contains driver-registrar & csi driver nodeplugin API objects
-# that are necessary to run CSI nodeplugin for nfs
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.node.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: {{ .Values.node.maxUnavailable }}
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: {{ .Values.node.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.node.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: ClusterFirstWithHostNet
-      nodeSelector:
-        kubernetes.io/os: linux
-{{- with .Values.node.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.node.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
-        - name: node-driver-registrar
-          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          args :
-            - "--v={{ .Values.node.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: /var/lib/kubelet/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - hostPath:
-            path: /var/lib/kubelet/plugins_registry
-            type: Directory
-          name: registration-dir

charts/v3.0.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml

@@ -1,54 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-controller-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-{{- end -}}
-
-{{- if .Values.rbac.create -}}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-{{ include "nfs.labels" . | indent 2 }}
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-csi-provisioner-binding
-{{ include "nfs.labels" . | indent 2 }}
-subjects:
-  - kind: ServiceAccount
-    name: csi-{{ .Values.rbac.name }}-controller-sa
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io
-{{- end -}}

charts/v3.0.0/csi-driver-nfs/values.yaml

@@ -1,105 +0,0 @@
-image:
-    nfs:
-        repository: registry.k8s.io/sig-storage/nfsplugin
-        tag: v3.0.0
-        pullPolicy: IfNotPresent
-    csiProvisioner:
-        repository: registry.k8s.io/sig-storage/csi-provisioner
-        tag: v2.2.2
-        pullPolicy: IfNotPresent
-    livenessProbe:
-        repository: registry.k8s.io/sig-storage/livenessprobe
-        tag: v2.5.0
-        pullPolicy: IfNotPresent
-    nodeDriverRegistrar:
-        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
-        tag: v2.4.0
-        pullPolicy: IfNotPresent
-
-serviceAccount:
-  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
-  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
-
-rbac:
-  create: true
-  name: nfs
-
-controller:
-  name: csi-nfs-controller
-  replicas: 2
-  runOnMaster: false
-  livenessProbe:
-    healthPort: 29652
-  logLevel: 5
-  tolerations:
-    - key: "node-role.kubernetes.io/master"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/controlplane"
-      operator: "Exists"
-      effect: "NoSchedule"
-  resources:
-    csiProvisioner:
-      limits:
-        cpu: 1
-        memory: 400Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    livenessProbe:
-      limits:
-        cpu: 1
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        cpu: 1
-        memory: 200Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-node:
-  name: csi-nfs-node
-  maxUnavailable: 1
-  logLevel: 5
-  livenessProbe:
-    healthPort: 29653
-  tolerations:
-    - operator: "Exists"
-  resources:
-    livenessProbe:
-      limits:
-        cpu: 1
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nodeDriverRegistrar:
-      limits:
-        cpu: 1
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        cpu: 1
-        memory: 300Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-feature:
-  enableFSGroupPolicy: false
-
-driver:
-  name: nfs.csi.k8s.io
-
-## Reference to one or more secrets to be used when pulling images
-## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
-##
-imagePullSecrets: []
-# - name: "image-pull-secret"

charts/v3.1.0/csi-driver-nfs/.helmignore

@@ -1,22 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/

charts/v3.1.0/csi-driver-nfs/Chart.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-appVersion: v3.1.0
-description: CSI NFS Driver for Kubernetes
-name: csi-driver-nfs
-version: v3.1.0

charts/v3.1.0/csi-driver-nfs/templates/NOTES.txt

@@ -1,5 +0,0 @@
- The CSI NFS Driver is getting deployed to your cluster.
-
-To check CSI NFS Driver pods status, please run:
-
-  kubectl --namespace={{ .Release.Namespace }} get pods --selector="release={{ .Release.Name }}" --watch

charts/v3.1.0/csi-driver-nfs/templates/_helpers.tpl

@@ -1,16 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-
-{{/* Expand the name of the chart.*/}}
-{{- define "nfs.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/* labels for helm resources */}}
-{{- define "nfs.labels" -}}
-labels:
-  app.kubernetes.io/instance: "{{ .Release.Name }}"
-  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
-  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
-  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
-  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
-{{- end -}}

charts/v3.1.0/csi-driver-nfs/templates/csi-nfs-controller.yaml

@@ -1,109 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.controller.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  replicas: {{ .Values.controller.replicas }}
-  selector:
-    matchLabels:
-      app: {{ .Values.controller.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.controller.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: ClusterFirstWithHostNet
-      serviceAccountName: {{ .Values.serviceAccount.controller }}
-      nodeSelector:
-        kubernetes.io/os: linux
-        {{- if .Values.controller.runOnMaster}}
-        kubernetes.io/role: master
-        {{- end}}
-      priorityClassName: system-cluster-critical
-{{- with .Values.controller.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: csi-provisioner
-          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
-        - name: nfs
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          args:
-            - "--v={{ .Values.controller.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-            - "--working-mount-dir={{ .Values.controller.workingMountDir }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

charts/v3.1.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml

@@ -1,14 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: {{ .Values.driver.name }}
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-  {{- if .Values.feature.enableInlineVolume}}
-    - Ephemeral
-  {{- end}}
-  {{- if .Values.feature.enableFSGroupPolicy}}
-  fsGroupPolicy: File
-  {{- end}}

charts/v3.1.0/csi-driver-nfs/templates/csi-nfs-node.yaml

@@ -1,127 +0,0 @@
-# This YAML file contains driver-registrar & csi driver nodeplugin API objects
-# that are necessary to run CSI nodeplugin for nfs
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.node.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: {{ .Values.node.maxUnavailable }}
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: {{ .Values.node.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.node.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: ClusterFirstWithHostNet
-      nodeSelector:
-        kubernetes.io/os: linux
-{{- with .Values.node.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.node.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
-        - name: node-driver-registrar
-          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          args :
-            - "--v={{ .Values.node.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: /var/lib/kubelet/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - hostPath:
-            path: /var/lib/kubelet/plugins_registry
-            type: Directory
-          name: registration-dir

charts/v3.1.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml

@@ -1,57 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-controller-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-{{- end -}}
-
-{{- if .Values.rbac.create -}}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-{{ include "nfs.labels" . | indent 2 }}
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-csi-provisioner-binding
-{{ include "nfs.labels" . | indent 2 }}
-subjects:
-  - kind: ServiceAccount
-    name: csi-{{ .Values.rbac.name }}-controller-sa
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io
-{{- end -}}

charts/v3.1.0/csi-driver-nfs/values.yaml

@@ -1,102 +0,0 @@
-image:
-    nfs:
-        repository: registry.k8s.io/sig-storage/nfsplugin
-        tag: v3.1.0
-        pullPolicy: IfNotPresent
-    csiProvisioner:
-        repository: registry.k8s.io/sig-storage/csi-provisioner
-        tag: v2.2.2
-        pullPolicy: IfNotPresent
-    livenessProbe:
-        repository: registry.k8s.io/sig-storage/livenessprobe
-        tag: v2.5.0
-        pullPolicy: IfNotPresent
-    nodeDriverRegistrar:
-        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
-        tag: v2.4.0
-        pullPolicy: IfNotPresent
-
-serviceAccount:
-  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
-  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
-
-rbac:
-  create: true
-  name: nfs
-
-driver:
-  name: nfs.csi.k8s.io
-  mountPermissions: 0777
-
-feature:
-  enableFSGroupPolicy: false
-  enableInlineVolume: false
-
-controller:
-  name: csi-nfs-controller
-  replicas: 2
-  runOnMaster: false
-  livenessProbe:
-    healthPort: 29652
-  logLevel: 5
-  workingMountDir: "/tmp"
-  tolerations:
-    - key: "node-role.kubernetes.io/master"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/controlplane"
-      operator: "Exists"
-      effect: "NoSchedule"
-  resources:
-    csiProvisioner:
-      limits:
-        memory: 400Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 200Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-node:
-  name: csi-nfs-node
-  maxUnavailable: 1
-  logLevel: 5
-  livenessProbe:
-    healthPort: 29653
-  tolerations:
-    - operator: "Exists"
-  resources:
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nodeDriverRegistrar:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 300Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-## Reference to one or more secrets to be used when pulling images
-## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
-##
-imagePullSecrets: []
-# - name: "image-pull-secret"

charts/v4.0.0/csi-driver-nfs/.helmignore

@@ -1,22 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/

charts/v4.0.0/csi-driver-nfs/Chart.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-appVersion: v4.0.0
-description: CSI NFS Driver for Kubernetes
-name: csi-driver-nfs
-version: v4.0.0

charts/v4.0.0/csi-driver-nfs/templates/NOTES.txt

@@ -1,5 +0,0 @@
- The CSI NFS Driver is getting deployed to your cluster.
-
-To check CSI NFS Driver pods status, please run:
-
-  kubectl --namespace={{ .Release.Namespace }} get pods --selector="release={{ .Release.Name }}" --watch

charts/v4.0.0/csi-driver-nfs/templates/_helpers.tpl

@@ -1,19 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-
-{{/* Expand the name of the chart.*/}}
-{{- define "nfs.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/* labels for helm resources */}}
-{{- define "nfs.labels" -}}
-labels:
-  app.kubernetes.io/instance: "{{ .Release.Name }}"
-  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
-  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
-  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
-  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
-  {{- if .Values.customLabels }}
-{{ toYaml .Values.customLabels | indent 2 -}}
-  {{- end }}
-{{- end -}}

charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-controller.yaml

@@ -1,110 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.controller.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  replicas: {{ .Values.controller.replicas }}
-  selector:
-    matchLabels:
-      app: {{ .Values.controller.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.controller.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: {{ .Values.controller.dnsPolicy }}
-      serviceAccountName: {{ .Values.serviceAccount.controller }}
-      nodeSelector:
-        kubernetes.io/os: linux
-        {{- if .Values.controller.runOnMaster}}
-        kubernetes.io/role: master
-        {{- end}}
-      priorityClassName: system-cluster-critical
-{{- with .Values.controller.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: csi-provisioner
-          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-            - "--leader-election-namespace={{ .Release.Namespace }}"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
-        - name: nfs
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          args:
-            - "--v={{ .Values.controller.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-            - "--working-mount-dir={{ .Values.controller.workingMountDir }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: {{ .Values.kubeletDir }}/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: {{ .Values.kubeletDir }}/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: {{ .Values.driver.name }}
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-  {{- if .Values.feature.enableInlineVolume}}
-    - Ephemeral
-  {{- end}}
-  {{- if .Values.feature.enableFSGroupPolicy}}
-  fsGroupPolicy: File
-  {{- end}}

charts/v4.0.0/csi-driver-nfs/templates/csi-nfs-node.yaml

@@ -1,126 +0,0 @@
----
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.node.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: {{ .Values.node.maxUnavailable }}
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: {{ .Values.node.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.node.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: {{ .Values.controller.dnsPolicy }}
-      nodeSelector:
-        kubernetes.io/os: linux
-{{- with .Values.node.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.node.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
-        - name: node-driver-registrar
-          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          args :
-            - "--v={{ .Values.node.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: {{ .Values.kubeletDir }}/pods
-              mountPropagation: "Bidirectional"
-          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: {{ .Values.kubeletDir }}/pods
-            type: Directory
-        - hostPath:
-            path: {{ .Values.kubeletDir }}/plugins_registry
-            type: Directory
-          name: registration-dir

charts/v4.0.0/csi-driver-nfs/templates/rbac-csi-nfs-controller.yaml

@@ -1,57 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-controller-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-{{- end -}}
-
-{{- if .Values.rbac.create -}}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-{{ include "nfs.labels" . | indent 2 }}
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-csi-provisioner-binding
-{{ include "nfs.labels" . | indent 2 }}
-subjects:
-  - kind: ServiceAccount
-    name: csi-{{ .Values.rbac.name }}-controller-sa
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io
-{{- end -}}

charts/v4.0.0/csi-driver-nfs/values.yaml

@@ -1,110 +0,0 @@
-customLabels: {}
-image:
-    nfs:
-        repository: registry.k8s.io/sig-storage/nfsplugin
-        tag: v4.2.0
-        pullPolicy: IfNotPresent
-    csiProvisioner:
-        repository: registry.k8s.io/sig-storage/csi-provisioner
-        tag: v3.3.0
-        pullPolicy: IfNotPresent
-    livenessProbe:
-        repository: registry.k8s.io/sig-storage/livenessprobe
-        tag: v2.8.0
-        pullPolicy: IfNotPresent
-    nodeDriverRegistrar:
-        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
-        tag: v2.6.2
-        pullPolicy: IfNotPresent
-
-serviceAccount:
-  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
-  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
-
-rbac:
-  create: true
-  name: nfs
-
-driver:
-  name: nfs.csi.k8s.io
-  mountPermissions: 0777
-
-feature:
-  enableFSGroupPolicy: true
-  enableInlineVolume: false
-
-kubeletDir: /var/lib/kubelet
-
-controller:
-  name: csi-nfs-controller
-  replicas: 1
-  runOnMaster: false
-  livenessProbe:
-    healthPort: 29652
-  logLevel: 5
-  workingMountDir: "/tmp"
-  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-  tolerations:
-    - key: "node-role.kubernetes.io/master"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/controlplane"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/control-plane"
-      operator: "Exists"
-      effect: "NoSchedule"
-  resources:
-    csiProvisioner:
-      limits:
-        memory: 400Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 200Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-node:
-  name: csi-nfs-node
-  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-  maxUnavailable: 1
-  logLevel: 5
-  livenessProbe:
-    healthPort: 29653
-  tolerations:
-    - operator: "Exists"
-  resources:
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nodeDriverRegistrar:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 300Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-## Reference to one or more secrets to be used when pulling images
-## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
-##
-imagePullSecrets: []
-# - name: "image-pull-secret"

charts/v4.2.0/csi-driver-nfs/.helmignore

@@ -1,22 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/

charts/v4.2.0/csi-driver-nfs/Chart.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-appVersion: v4.2.0
-description: CSI NFS Driver for Kubernetes
-name: csi-driver-nfs
-version: v4.2.0

charts/v4.2.0/csi-driver-nfs/templates/NOTES.txt

@@ -1,5 +0,0 @@
- The CSI NFS Driver is getting deployed to your cluster.
-
-To check CSI NFS Driver pods status, please run:
-
-  kubectl --namespace={{ .Release.Namespace }} get pods --selector="app.kubernetes.io/instance={{ .Release.Name }}" --watch

charts/v4.2.0/csi-driver-nfs/templates/_helpers.tpl

@@ -1,19 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-
-{{/* Expand the name of the chart.*/}}
-{{- define "nfs.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/* labels for helm resources */}}
-{{- define "nfs.labels" -}}
-labels:
-  app.kubernetes.io/instance: "{{ .Release.Name }}"
-  app.kubernetes.io/managed-by: "{{ .Release.Service }}"
-  app.kubernetes.io/name: "{{ template "nfs.name" . }}"
-  app.kubernetes.io/version: "{{ .Chart.AppVersion }}"
-  helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
-  {{- if .Values.customLabels }}
-{{ toYaml .Values.customLabels | indent 2 -}}
-  {{- end }}
-{{- end -}}

charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-controller.yaml

@@ -1,123 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.controller.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  replicas: {{ .Values.controller.replicas }}
-  selector:
-    matchLabels:
-      app: {{ .Values.controller.name }}
-  strategy:
-    type: {{ .Values.controller.strategyType }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.controller.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: {{ .Values.controller.dnsPolicy }}
-      serviceAccountName: {{ .Values.serviceAccount.controller }}
-{{- with .Values.controller.affinity }}
-      affinity:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      nodeSelector:
-        kubernetes.io/os: linux
-        {{- if .Values.controller.runOnMaster}}
-        node-role.kubernetes.io/master: ""
-        {{- end}}
-        {{- if .Values.controller.runOnControlPlane}}
-        node-role.kubernetes.io/control-plane: ""
-        {{- end}}
-{{- with .Values.controller.nodeSelector }}
-{{ toYaml . | indent 8 }}
-{{- end }}
-      priorityClassName: system-cluster-critical
-{{- with .Values.controller.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: csi-provisioner
-          image: "{{ .Values.image.csiProvisioner.repository }}:{{ .Values.image.csiProvisioner.tag }}"
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-            - "--leader-election-namespace={{ .Release.Namespace }}"
-            - "--extra-create-metadata=true"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          imagePullPolicy: {{ .Values.image.csiProvisioner.pullPolicy }}
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
-        - name: nfs
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          args:
-            - "--v={{ .Values.controller.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-            - "--working-mount-dir={{ .Values.controller.workingMountDir }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: {{ .Values.kubeletDir }}/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources: {{- toYaml .Values.controller.resources.nfs | nindent 12 }}
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: {{ .Values.kubeletDir }}/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-driverinfo.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: {{ .Values.driver.name }}
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-  {{- if .Values.feature.enableInlineVolume}}
-    - Ephemeral
-  {{- end}}
-  {{- if .Values.feature.enableFSGroupPolicy}}
-  fsGroupPolicy: File
-  {{- end}}

charts/v4.2.0/csi-driver-nfs/templates/csi-nfs-node.yaml

@@ -1,134 +0,0 @@
----
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: {{ .Values.node.name }}
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: {{ .Values.node.maxUnavailable }}
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: {{ .Values.node.name }}
-  template:
-    metadata:
-{{ include "nfs.labels" . | indent 6 }}
-        app: {{ .Values.node.name }}
-    spec:
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      hostNetwork: true # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: {{ .Values.controller.dnsPolicy }}
-      serviceAccountName: csi-nfs-node-sa
-{{- with .Values.node.affinity }}
-      affinity:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      nodeSelector:
-        kubernetes.io/os: linux
-{{- with .Values.node.nodeSelector }}
-{{ toYaml . | indent 8 }}
-{{- end }}
-{{- with .Values.node.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-{{- end }}
-      containers:
-        - name: liveness-probe
-          image: "{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port={{ .Values.node.livenessProbe.healthPort }}
-            - --v=2
-          imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources: {{- toYaml .Values.node.resources.livenessProbe | nindent 12 }}
-        - name: node-driver-registrar
-          image: "{{ .Values.image.nodeDriverRegistrar.repository }}:{{ .Values.image.nodeDriverRegistrar.tag }}"
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          imagePullPolicy: {{ .Values.image.nodeDriverRegistrar.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources: {{- toYaml .Values.node.resources.nodeDriverRegistrar | nindent 12 }}
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: "{{ .Values.image.nfs.repository }}:{{ .Values.image.nfs.tag }}"
-          args :
-            - "--v={{ .Values.node.logLevel }}"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-            - "--drivername={{ .Values.driver.name }}"
-            - "--mount-permissions={{ .Values.driver.mountPermissions }}"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: {{ .Values.image.nfs.pullPolicy }}
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: {{ .Values.kubeletDir }}/pods
-              mountPropagation: "Bidirectional"
-          resources: {{- toYaml .Values.node.resources.nfs | nindent 12 }}
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: {{ .Values.kubeletDir }}/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: {{ .Values.kubeletDir }}/pods
-            type: Directory
-        - hostPath:
-            path: {{ .Values.kubeletDir }}/plugins_registry
-            type: Directory
-          name: registration-dir

charts/v4.2.0/csi-driver-nfs/templates/rbac-csi-nfs.yaml

@@ -1,64 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-controller-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-{{ .Values.rbac.name }}-node-sa
-  namespace: {{ .Release.Namespace }}
-{{ include "nfs.labels" . | indent 2 }}
----
-{{- end }}
-
-{{ if .Values.rbac.create -}}
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-{{ include "nfs.labels" . | indent 2 }}
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: {{ .Values.rbac.name }}-csi-provisioner-binding
-{{ include "nfs.labels" . | indent 2 }}
-subjects:
-  - kind: ServiceAccount
-    name: csi-{{ .Values.rbac.name }}-controller-sa
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: {{ .Values.rbac.name }}-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io
-{{- end -}}

charts/v4.2.0/csi-driver-nfs/values.yaml

@@ -1,116 +0,0 @@
-customLabels: {}
-image:
-    nfs:
-        repository: registry.k8s.io/sig-storage/nfsplugin
-        tag: v4.2.0
-        pullPolicy: IfNotPresent
-    csiProvisioner:
-        repository: registry.k8s.io/sig-storage/csi-provisioner
-        tag: v3.3.0
-        pullPolicy: IfNotPresent
-    livenessProbe:
-        repository: registry.k8s.io/sig-storage/livenessprobe
-        tag: v2.8.0
-        pullPolicy: IfNotPresent
-    nodeDriverRegistrar:
-        repository: registry.k8s.io/sig-storage/csi-node-driver-registrar
-        tag: v2.6.2
-        pullPolicy: IfNotPresent
-
-serviceAccount:
-  create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
-  controller: csi-nfs-controller-sa # Name of Service Account to be created or used
-
-rbac:
-  create: true
-  name: nfs
-
-driver:
-  name: nfs.csi.k8s.io
-  mountPermissions: 0
-
-feature:
-  enableFSGroupPolicy: true
-  enableInlineVolume: false
-
-kubeletDir: /var/lib/kubelet
-
-controller:
-  name: csi-nfs-controller
-  replicas: 1
-  strategyType: Recreate
-  runOnMaster: false
-  runOnControlPlane: false
-  livenessProbe:
-    healthPort: 29652
-  logLevel: 5
-  workingMountDir: "/tmp"
-  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-  affinity: {}
-  nodeSelector: {}
-  tolerations:
-    - key: "node-role.kubernetes.io/master"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/controlplane"
-      operator: "Exists"
-      effect: "NoSchedule"
-    - key: "node-role.kubernetes.io/control-plane"
-      operator: "Exists"
-      effect: "NoSchedule"
-  resources:
-    csiProvisioner:
-      limits:
-        memory: 400Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 200Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-node:
-  name: csi-nfs-node
-  dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-  maxUnavailable: 1
-  logLevel: 5
-  livenessProbe:
-    healthPort: 29653
-  affinity: {}
-  nodeSelector: {}
-  tolerations:
-    - operator: "Exists"
-  resources:
-    livenessProbe:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nodeDriverRegistrar:
-      limits:
-        memory: 100Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-    nfs:
-      limits:
-        memory: 300Mi
-      requests:
-        cpu: 10m
-        memory: 20Mi
-
-## Reference to one or more secrets to be used when pulling images
-## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
-##
-imagePullSecrets: []
-# - name: "image-pull-secret"

cmd/nfsplugin/main.go

@@ -18,19 +18,19 @@ package main
 
 import (
 	"flag"
+	"fmt"
 	"os"
+	"strconv"
+
+	"github.com/spf13/cobra"
 
 	"github.com/kubernetes-csi/csi-driver-nfs/pkg/nfs"
-
-	"k8s.io/klog/v2"
 )
 
 var (
-	endpoint         = flag.String("endpoint", "unix://tmp/csi.sock", "CSI endpoint")
+	endpoint string
-	nodeID           = flag.String("nodeid", "", "node id")
+	nodeID   string
-	mountPermissions = flag.Uint64("mount-permissions", 0777, "mounted folder permissions")
+	perm     string
-	driverName       = flag.String("drivername", nfs.DefaultDriverName, "name of the driver")
-	workingMountDir  = flag.String("working-mount-dir", "/tmp", "working directory for provisioner to mount nfs shares temporarily")
 )
 
 func init() {
@@ -38,24 +38,49 @@ func init() {
 }
 
 func main() {
-	klog.InitFlags(nil)
+
-	flag.Parse()
+	_ = flag.CommandLine.Parse([]string{})
-	if *nodeID == "" {
+
-		klog.Warning("nodeid is empty")
+	cmd := &cobra.Command{
+		Use:   "NFS",
+		Short: "CSI based NFS driver",
+		Run: func(cmd *cobra.Command, args []string) {
+			handle()
+		},
+	}
+
+	cmd.Flags().AddGoFlagSet(flag.CommandLine)
+
+	cmd.PersistentFlags().StringVar(&nodeID, "nodeid", "", "node id")
+	_ = cmd.MarkPersistentFlagRequired("nodeid")
+
+	cmd.PersistentFlags().StringVar(&endpoint, "endpoint", "", "CSI endpoint")
+	_ = cmd.MarkPersistentFlagRequired("endpoint")
+
+	cmd.PersistentFlags().StringVar(&perm, "mount-permissions", "", "mounted folder permissions")
+
+	_ = cmd.ParseFlags(os.Args[1:])
+	if err := cmd.Execute(); err != nil {
+		fmt.Fprintf(os.Stderr, "%s", err.Error())
+		os.Exit(1)
 	}
 
-	handle()
 	os.Exit(0)
 }
 
 func handle() {
-	driverOptions := nfs.DriverOptions{
+	// Converting string permission representation to *uint32
-		NodeID:           *nodeID,
+	var parsedPerm *uint32
-		DriverName:       *driverName,
+	if perm != "" {
-		Endpoint:         *endpoint,
+		permu64, err := strconv.ParseUint(perm, 8, 32)
-		MountPermissions: *mountPermissions,
+		if err != nil {
-		WorkingMountDir:  *workingMountDir,
+			fmt.Fprintf(os.Stderr, "Incorrect mount-permissions value: %q", perm)
+			os.Exit(1)
 		}
-	d := nfs.NewDriver(&driverOptions)
+		permu32 := uint32(permu64)
-	d.Run(false)
+		parsedPerm = &permu32
+	}
+
+	d := nfs.NewNFSdriver(nodeID, endpoint, parsedPerm)
+	d.Run()
 }

deploy/csi-nfs-controller.yaml

@@ -5,7 +5,7 @@ metadata:
   name: csi-nfs-controller
   namespace: kube-system
 spec:
-  replicas: 1
+  replicas: 2
   selector:
     matchLabels:
       app: csi-nfs-controller
@@ -14,30 +14,22 @@ spec:
       labels:
         app: csi-nfs-controller
     spec:
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
       serviceAccountName: csi-nfs-controller-sa
       nodeSelector:
-        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
+        kubernetes.io/os: linux
       priorityClassName: system-cluster-critical
       tolerations:
         - key: "node-role.kubernetes.io/master"
-          operator: "Exists"
+          operator: "Equal"
-          effect: "NoSchedule"
+          value: "true"
-        - key: "node-role.kubernetes.io/controlplane"
-          operator: "Exists"
-          effect: "NoSchedule"
-        - key: "node-role.kubernetes.io/control-plane"
-          operator: "Exists"
           effect: "NoSchedule"
       containers:
         - name: csi-provisioner
-          image: registry.k8s.io/sig-storage/csi-provisioner:v3.1.0
+          image: k8s.gcr.io/sig-storage/csi-provisioner:v2.0.4
           args:
-            - "-v=2"
+            - "-v=5"
             - "--csi-address=$(ADDRESS)"
             - "--leader-election"
-            - "--leader-election-namespace=kube-system"
           env:
             - name: ADDRESS
               value: /csi/csi.sock
@@ -46,28 +38,30 @@ spec:
               name: socket-dir
           resources:
             limits:
-              memory: 400Mi
+              cpu: 100m
+              memory: 100Mi
             requests:
               cpu: 10m
               memory: 20Mi
         - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.7.0
+          image: k8s.gcr.io/sig-storage/livenessprobe:v2.1.0
           args:
             - --csi-address=/csi/csi.sock
             - --probe-timeout=3s
             - --health-port=29652
-            - --v=2
+            - --v=5
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
           resources:
             limits:
+              cpu: 100m
               memory: 100Mi
             requests:
               cpu: 10m
               memory: 20Mi
         - name: nfs
-          image: gcr.io/k8s-staging-sig-storage/nfsplugin:canary
+          image: gcr.io/k8s-staging-sig-storage/nfsplugin:amd64-linux-canary
           securityContext:
             privileged: true
             capabilities:
@@ -85,18 +79,6 @@ spec:
                   fieldPath: spec.nodeName
             - name: CSI_ENDPOINT
               value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29652
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
           volumeMounts:
             - name: pods-mount-dir
               mountPath: /var/lib/kubelet/pods
@@ -105,6 +87,7 @@ spec:
               name: socket-dir
           resources:
             limits:
+              cpu: 200m
               memory: 200Mi
             requests:
               cpu: 10m

deploy/csi-nfs-driverinfo.yaml

@@ -1,5 +1,5 @@
 ---
-apiVersion: storage.k8s.io/v1
+apiVersion: storage.k8s.io/v1beta1
 kind: CSIDriver
 metadata:
   name: nfs.csi.k8s.io
@@ -7,5 +7,4 @@ spec:
   attachRequired: false
   volumeLifecycleModes:
     - Persistent
-    - Ephemeral
+  podInfoOnMount: true
-  fsGroupPolicy: File

deploy/csi-nfs-node.yaml

@@ -1,14 +1,12 @@
 ---
+# This YAML file contains driver-registrar & csi driver nodeplugin API objects
+# that are necessary to run CSI nodeplugin for nfs
 kind: DaemonSet
 apiVersion: apps/v1
 metadata:
   name: csi-nfs-node
   namespace: kube-system
 spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: 1
-    type: RollingUpdate
   selector:
     matchLabels:
       app: csi-nfs-node
@@ -18,46 +16,36 @@ spec:
         app: csi-nfs-node
     spec:
       hostNetwork: true  # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
+      dnsPolicy: ClusterFirstWithHostNet
-      serviceAccountName: csi-nfs-node-sa
-      nodeSelector:
-        kubernetes.io/os: linux
-      tolerations:
-        - operator: "Exists"
       containers:
         - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.7.0
+          image: k8s.gcr.io/sig-storage/livenessprobe:v2.1.0
           args:
             - --csi-address=/csi/csi.sock
             - --probe-timeout=3s
             - --health-port=29653
-            - --v=2
+            - --v=5
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
           resources:
             limits:
+              cpu: 100m
               memory: 100Mi
             requests:
               cpu: 10m
               memory: 20Mi
         - name: node-driver-registrar
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.1
+          image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.0.1
-          args:
+          lifecycle:
-            - --v=2
+            preStop:
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          livenessProbe:
               exec:
-              command:
+                command: ["/bin/sh", "-c", "rm -rf /registration/csi-nfsplugin /registration/csi-nfsplugin-reg.sock"]
-                - /csi-node-driver-registrar
+          args:
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
+            - --v=5
-                - --mode=kubelet-registration-probe
+            - --csi-address=/csi/csi.sock
-            initialDelaySeconds: 30
+            - --kubelet-registration-path=/var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
-            timeoutSeconds: 15
           env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
             - name: KUBE_NODE_NAME
               valueFrom:
                 fieldRef:
@@ -67,19 +55,13 @@ spec:
               mountPath: /csi
             - name: registration-dir
               mountPath: /registration
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
         - name: nfs
           securityContext:
             privileged: true
             capabilities:
               add: ["SYS_ADMIN"]
             allowPrivilegeEscalation: true
-          image: gcr.io/k8s-staging-sig-storage/nfsplugin:canary
+          image: gcr.io/k8s-staging-sig-storage/nfsplugin:amd64-linux-canary
           args:
             - "-v=5"
             - "--nodeid=$(NODE_ID)"
@@ -91,18 +73,6 @@ spec:
                   fieldPath: spec.nodeName
             - name: CSI_ENDPOINT
               value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29653
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
           imagePullPolicy: "IfNotPresent"
           volumeMounts:
             - name: socket-dir
@@ -110,12 +80,6 @@ spec:
             - name: pods-mount-dir
               mountPath: /var/lib/kubelet/pods
               mountPropagation: "Bidirectional"
-          resources:
-            limits:
-              memory: 300Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
       volumes:
         - name: socket-dir
           hostPath:

deploy/example/README.md

@@ -1,55 +0,0 @@
-# CSI driver example
-
-You can use NFS CSI Driver to provision Persistent Volumes statically or dynamically. Please read [Kubernetes Persistent Volumes documentation](https://kubernetes.io/docs/concepts/storage/persistent-volumes/) for more information about Static and Dynamic provisioning.
-
-Please refer to [driver parameters](../../docs/driver-parameters.md) for more detailed usage.
-
-## Prerequisite
-
-- [Set up a NFS Server on a Kubernetes cluster](./nfs-provisioner/README.md) as an example
-- [Install NFS CSI Driver](../../docs/install-nfs-csi-driver.md)
-
-## Storage Class Usage (Dynamic Provisioning)
-
- -  Create a storage class
- > change `server`, `share` with your existing NFS server address and share name
-```yaml
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: nfs-csi
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: nfs-server.default.svc.cluster.local
-  share: /
-  # csi.storage.k8s.io/provisioner-secret is only needed for providing mountOptions in DeleteVolume
-  # csi.storage.k8s.io/provisioner-secret-name: "mount-options"
-  # csi.storage.k8s.io/provisioner-secret-namespace: "default"
-reclaimPolicy: Delete
-volumeBindingMode: Immediate
-mountOptions:
-  - nconnect=8  # only supported on linux kernel version >= 5.3
-  - nfsvers=4.1
-```
-
- - create PVC
-```console
-kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/deploy/example/pvc-nfs-csi-dynamic.yaml
-```
-
-## PV/PVC Usage (Static Provisioning)
-
-- Follow the following command to create `PersistentVolume` and `PersistentVolumeClaim` statically.
-
-```bash
-# create PV
-kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/deploy/example/pv-nfs-csi.yaml
-
-# create PVC
-kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/deploy/example/pvc-nfs-csi-static.yaml
-```
-
-## Create a deployment
-```console
-kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/deploy/example/deployment.yaml
-```

deploy/example/daemonset-nfs-ephemeral.yaml

@@ -1,38 +0,0 @@
----
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: daemonset-nfs-ephemeral
-spec:
-  selector:
-    matchLabels:
-      app: daemonset-nfs-ephemeral
-  template:
-    metadata:
-      labels:
-        app: daemonset-nfs-ephemeral
-    spec:
-      nodeSelector:
-        kubernetes.io/os: linux
-      containers:
-        - name: nginx
-          image: mcr.microsoft.com/oss/nginx/nginx:1.19.5
-          command:
-            - "/bin/bash"
-            - "-c"
-            - set -euo pipefail; while true; do echo $(date) >> /mnt/nfs/outfile; sleep 1; done
-          volumeMounts:
-            - name: nfs
-              mountPath: "/mnt/nfs"
-              readOnly: false
-      volumes:
-        - name: nfs
-          ephemeral:
-            volumeClaimTemplate:
-              spec:
-                accessModes:
-                  - ReadWriteOnce
-                resources:
-                  requests:
-                    storage: 10Gi
-                storageClassName: nfs-csi

deploy/example/deployment.yaml

@@ -1,44 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pvc-deployment-nfs
-spec:
-  accessModes:
-    - ReadWriteMany  # In this example, multiple Pods consume the same PVC.
-  resources:
-    requests:
-      storage: 10Gi
-  storageClassName: nfs-csi
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: deployment-nfs
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      name: deployment-nfs
-  template:
-    metadata:
-      name: deployment-nfs
-      labels:
-        name: deployment-nfs
-    spec:
-      nodeSelector:
-        "kubernetes.io/os": linux
-      containers:
-        - name: deployment-nfs
-          image: mcr.microsoft.com/oss/nginx/nginx:1.19.5
-          command:
-            - "/bin/bash"
-            - "-c"
-            - set -euo pipefail; while true; do echo $(hostname) $(date) >> /mnt/nfs/outfile; sleep 1; done
-          volumeMounts:
-            - name: nfs
-              mountPath: "/mnt/nfs"
-      volumes:
-        - name: nfs
-          persistentVolumeClaim:
-            claimName: pvc-deployment-nfs

deploy/example/fsgroup/README.md

@@ -1,24 +0,0 @@
-# fsGroup Support
-
-[fsGroupPolicy](https://kubernetes-csi.github.io/docs/support-fsgroup.html) feature is Beta from Kubernetes 1.20, and disabled by default, follow below steps to enable this feature.
-
-### Option#1: Enable fsGroupPolicy support in [driver helm installation](../../../charts)
-
-add `--set feature.enableFSGroupPolicy=true` in helm installation command.
-
-### Option#2: Enable fsGroupPolicy support on a cluster with CSI driver already installed
-
-```console
-kubectl delete CSIDriver nfs.csi.k8s.io
-cat <<EOF | kubectl create -f -
-apiVersion: storage.k8s.io/v1beta1
-kind: CSIDriver
-metadata:
-  name: nfs.csi.k8s.io
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-  fsGroupPolicy: File
-EOF
-```

deploy/example/nfs-provisioner/README.md

@@ -1,36 +0,0 @@
-# Set up a NFS Server on a Kubernetes cluster
-
-After the NFS CSI Driver is deployed in your cluster, you can follow this documentation to quickly deploy some example applications. You can use NFS CSI Driver to provision Persistent Volumes statically or dynamically. Please read Kubernetes Persistent Volumes for more information about Static and Dynamic provisioning.
-
-There are multiple different NFS servers you can use for testing of 
-the plugin, the major versions of the protocol v2, v3 and v4 should be supported
-by the current implementation. This page will show you how to set up a NFS Server deployment on a Kubernetes cluster.
-
-- To create a NFS provisioner on your Kubernetes cluster, run the following command.
-
-```bash
-kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/deploy/example/nfs-provisioner/nfs-server.yaml
-```
-
-- During the deployment, a new service `nfs-server` will be created which exposes the NFS server endpoint `nfs-server.default.svc.cluster.local` and the share path `/`. You can specify `PersistentVolume` or `StorageClass` using these information.
-
-- Deploy the NFS CSI driver, please refer to [install NFS CSI driver](../../../docs/install-nfs-csi-driver.md).
-
-- To check if the NFS server is working, we can statically create a PersistentVolume and a PersistentVolumeClaim, and mount it onto a sample pod:
-
-```bash
-kubectl create -f https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/deploy/example/nfs-provisioner/nginx-pod.yaml
-```
-
- - Verify if the NFS server is functional, you can check the mount point from the example pod.
-
- ```bash
-kubectl exec nginx-nfs-example -- bash -c "findmnt /var/www -o TARGET,SOURCE,FSTYPE"
-```
-
- - The output should look like the following:
-
- ```bash
-TARGET   SOURCE                                 FSTYPE
-/var/www nfs-server.default.svc.cluster.local:/ nfs4
-```

deploy/example/nfs-provisioner/nginx-pod.yaml

@@ -1,52 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: pv-nginx
-spec:
-  capacity:
-    storage: 10Gi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Delete
-  mountOptions:
-    - nfsvers=4.1
-  csi:
-    driver: nfs.csi.k8s.io
-    readOnly: false
-    volumeHandle: unique-volumeid  # make sure it's a unique id in the cluster
-    volumeAttributes:
-      server: nfs-server.default.svc.cluster.local
-      share: /
----
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: pvc-nginx
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 10Gi
-  volumeName: pv-nginx
-  storageClassName: ""
----
-apiVersion: v1
-kind: Pod
-metadata:
-  name: nginx-nfs-example
-spec:
-  containers:
-    - image: nginx
-      name: nginx
-      ports:
-        - containerPort: 80
-          protocol: TCP
-      volumeMounts:
-        - mountPath: /var/www
-          name: pvc-nginx
-  volumes:
-    - name: pvc-nginx
-      persistentVolumeClaim:
-        claimName: pvc-nginx

deploy/example/nginx-pod-inline-volume.yaml

@@ -1,26 +0,0 @@
----
-kind: Pod
-apiVersion: v1
-metadata:
-  name: nginx-pod-inline-volume
-spec:
-  nodeSelector:
-    "kubernetes.io/os": linux
-  containers:
-    - image: mcr.microsoft.com/oss/nginx/nginx:1.19.5
-      name: nginx-nfs
-      command:
-        - "/bin/bash"
-        - "-c"
-        - set -euo pipefail; while true; do echo $(date) >> /mnt/nfs/outfile; sleep 1; done
-      volumeMounts:
-        - name: persistent-storage
-          mountPath: "/mnt/nfs"
-  volumes:
-    - name: persistent-storage
-      csi:
-        driver: nfs.csi.k8s.io
-        volumeAttributes:
-          server: nfs-server.default.svc.cluster.local  # required
-          share: /  # required
-          mountOptions: "nfsvers=4.1,sec=sys"  # optional

deploy/example/storageclass-nfs.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: nfs-csi
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: nfs-server.default.svc.cluster.local
-  share: /
-  # csi.storage.k8s.io/provisioner-secret is only needed for providing mountOptions in DeleteVolume
-  # csi.storage.k8s.io/provisioner-secret-name: "mount-options"
-  # csi.storage.k8s.io/provisioner-secret-namespace: "default"
-reclaimPolicy: Delete
-volumeBindingMode: Immediate
-mountOptions:
-  - nconnect=8  # only supported on linux kernel version >= 5.3
-  - nfsvers=4.1

deploy/install-driver.sh

@@ -34,7 +34,7 @@ if [ $ver != "master" ]; then
 fi
 
 echo "Installing NFS CSI driver, version: $ver ..."
-kubectl apply -f $repo/rbac-csi-nfs.yaml
+kubectl apply -f $repo/rbac-csi-nfs-controller.yaml
 kubectl apply -f $repo/csi-nfs-driverinfo.yaml
 kubectl apply -f $repo/csi-nfs-controller.yaml
 kubectl apply -f $repo/csi-nfs-node.yaml

deploy/rbac-csi-nfs.yaml

@@ -1,57 +0,0 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-nfs-controller-sa
-  namespace: kube-system
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-nfs-node-sa
-  namespace: kube-system
----
-
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: nfs-external-provisioner-role
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: nfs-csi-provisioner-binding
-subjects:
-  - kind: ServiceAccount
-    name: csi-nfs-controller-sa
-    namespace: kube-system
-roleRef:
-  kind: ClusterRole
-  name: nfs-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io

deploy/uninstall-driver.sh

@@ -37,5 +37,5 @@ echo "Uninstalling NFS driver, version: $ver ..."
 kubectl delete -f $repo/csi-nfs-controller.yaml --ignore-not-found
 kubectl delete -f $repo/csi-nfs-node.yaml --ignore-not-found
 kubectl delete -f $repo/csi-nfs-driverinfo.yaml --ignore-not-found
-kubectl delete -f $repo/rbac-csi-nfs.yaml --ignore-not-found
+kubectl delete -f $repo/rbac-csi-nfs-controller.yaml --ignore-not-found
 echo 'Uninstalled NFS driver successfully.'

deploy/v3.0.0/csi-nfs-controller.yaml

@@ -1,117 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: csi-nfs-controller
-  namespace: kube-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: csi-nfs-controller
-  template:
-    metadata:
-      labels:
-        app: csi-nfs-controller
-    spec:
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: ClusterFirstWithHostNet
-      serviceAccountName: csi-nfs-controller-sa
-      nodeSelector:
-        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
-      priorityClassName: system-cluster-critical
-      tolerations:
-        - key: "node-role.kubernetes.io/master"
-          operator: "Exists"
-          effect: "NoSchedule"
-        - key: "node-role.kubernetes.io/controlplane"
-          operator: "Exists"
-          effect: "NoSchedule"
-      containers:
-        - name: csi-provisioner
-          image: registry.k8s.io/sig-storage/csi-provisioner:v2.2.2
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources:
-            limits:
-              cpu: 1
-              memory: 400Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.5.0
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port=29652
-            - --v=2
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources:
-            limits:
-              cpu: 1
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: nfs
-          image: registry.k8s.io/sig-storage/nfsplugin:v3.0.0
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: IfNotPresent
-          args:
-            - "-v=5"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29652
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources:
-            limits:
-              cpu: 1
-              memory: 200Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

deploy/v3.0.0/csi-nfs-driverinfo.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: nfs.csi.k8s.io
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent

deploy/v3.0.0/csi-nfs-node.yaml

@@ -1,135 +0,0 @@
----
-# This YAML file contains driver-registrar & csi driver nodeplugin API objects
-# that are necessary to run CSI nodeplugin for nfs
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: csi-nfs-node
-  namespace: kube-system
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: 1
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: csi-nfs-node
-  template:
-    metadata:
-      labels:
-        app: csi-nfs-node
-    spec:
-      hostNetwork: true  # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: ClusterFirstWithHostNet
-      nodeSelector:
-        kubernetes.io/os: linux
-      tolerations:
-        - operator: "Exists"
-      containers:
-        - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.5.0
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port=29653
-            - --v=2
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources:
-            limits:
-              cpu: 1
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: node-driver-registrar
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.4.0
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources:
-            limits:
-              cpu: 1
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: registry.k8s.io/sig-storage/nfsplugin:v3.0.0
-          args:
-            - "-v=5"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29653
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: "IfNotPresent"
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-          resources:
-            limits:
-              cpu: 1
-              memory: 300Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: /var/lib/kubelet/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - hostPath:
-            path: /var/lib/kubelet/plugins_registry
-            type: Directory
-          name: registration-dir

deploy/v3.1.0/csi-nfs-controller.yaml

@@ -1,114 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: csi-nfs-controller
-  namespace: kube-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: csi-nfs-controller
-  template:
-    metadata:
-      labels:
-        app: csi-nfs-controller
-    spec:
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: ClusterFirstWithHostNet
-      serviceAccountName: csi-nfs-controller-sa
-      nodeSelector:
-        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
-      priorityClassName: system-cluster-critical
-      tolerations:
-        - key: "node-role.kubernetes.io/master"
-          operator: "Exists"
-          effect: "NoSchedule"
-        - key: "node-role.kubernetes.io/controlplane"
-          operator: "Exists"
-          effect: "NoSchedule"
-      containers:
-        - name: csi-provisioner
-          image: registry.k8s.io/sig-storage/csi-provisioner:v2.2.2
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources:
-            limits:
-              memory: 400Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.5.0
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port=29652
-            - --v=2
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: nfs
-          image: registry.k8s.io/sig-storage/nfsplugin:v3.1.0
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: IfNotPresent
-          args:
-            - "-v=5"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29652
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources:
-            limits:
-              memory: 200Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

deploy/v3.1.0/csi-nfs-driverinfo.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: nfs.csi.k8s.io
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-    - Ephemeral

deploy/v3.1.0/csi-nfs-node.yaml

@@ -1,132 +0,0 @@
----
-# This YAML file contains driver-registrar & csi driver nodeplugin API objects
-# that are necessary to run CSI nodeplugin for nfs
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: csi-nfs-node
-  namespace: kube-system
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: 1
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: csi-nfs-node
-  template:
-    metadata:
-      labels:
-        app: csi-nfs-node
-    spec:
-      hostNetwork: true  # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: ClusterFirstWithHostNet
-      nodeSelector:
-        kubernetes.io/os: linux
-      tolerations:
-        - operator: "Exists"
-      containers:
-        - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.5.0
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port=29653
-            - --v=2
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: node-driver-registrar
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.4.0
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: registry.k8s.io/sig-storage/nfsplugin:v3.1.0
-          args:
-            - "-v=5"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29653
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: "IfNotPresent"
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-          resources:
-            limits:
-              memory: 300Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: /var/lib/kubelet/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - hostPath:
-            path: /var/lib/kubelet/plugins_registry
-            type: Directory
-          name: registration-dir

deploy/v3.1.0/rbac-csi-nfs-controller.yaml

@@ -1,52 +0,0 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-nfs-controller-sa
-  namespace: kube-system
-
----
-
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: nfs-external-provisioner-role
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: nfs-csi-provisioner-binding
-subjects:
-  - kind: ServiceAccount
-    name: csi-nfs-controller-sa
-    namespace: kube-system
-roleRef:
-  kind: ClusterRole
-  name: nfs-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io

deploy/v4.0.0/csi-nfs-controller.yaml

@@ -1,118 +0,0 @@
----
-kind: Deployment
-apiVersion: apps/v1
-metadata:
-  name: csi-nfs-controller
-  namespace: kube-system
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: csi-nfs-controller
-  template:
-    metadata:
-      labels:
-        app: csi-nfs-controller
-    spec:
-      hostNetwork: true  # controller also needs to mount nfs to create dir
-      dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-      serviceAccountName: csi-nfs-controller-sa
-      nodeSelector:
-        kubernetes.io/os: linux  # add "kubernetes.io/role: master" to run controller on master node
-      priorityClassName: system-cluster-critical
-      tolerations:
-        - key: "node-role.kubernetes.io/master"
-          operator: "Exists"
-          effect: "NoSchedule"
-        - key: "node-role.kubernetes.io/controlplane"
-          operator: "Exists"
-          effect: "NoSchedule"
-        - key: "node-role.kubernetes.io/control-plane"
-          operator: "Exists"
-          effect: "NoSchedule"
-      containers:
-        - name: csi-provisioner
-          image: registry.k8s.io/sig-storage/csi-provisioner:v3.1.0
-          args:
-            - "-v=2"
-            - "--csi-address=$(ADDRESS)"
-            - "--leader-election"
-            - "--leader-election-namespace=kube-system"
-          env:
-            - name: ADDRESS
-              value: /csi/csi.sock
-          volumeMounts:
-            - mountPath: /csi
-              name: socket-dir
-          resources:
-            limits:
-              memory: 400Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.6.0
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port=29652
-            - --v=2
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: nfs
-          image: registry.k8s.io/sig-storage/nfsplugin:v4.0.0
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          imagePullPolicy: IfNotPresent
-          args:
-            - "-v=5"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29652
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          volumeMounts:
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-            - mountPath: /csi
-              name: socket-dir
-          resources:
-            limits:
-              memory: 200Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      volumes:
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - name: socket-dir
-          emptyDir: {}

deploy/v4.0.0/csi-nfs-driverinfo.yaml

@@ -1,11 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: CSIDriver
-metadata:
-  name: nfs.csi.k8s.io
-spec:
-  attachRequired: false
-  volumeLifecycleModes:
-    - Persistent
-    - Ephemeral
-  fsGroupPolicy: File

deploy/v4.0.0/csi-nfs-node.yaml

@@ -1,130 +0,0 @@
----
-kind: DaemonSet
-apiVersion: apps/v1
-metadata:
-  name: csi-nfs-node
-  namespace: kube-system
-spec:
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: 1
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: csi-nfs-node
-  template:
-    metadata:
-      labels:
-        app: csi-nfs-node
-    spec:
-      hostNetwork: true  # original nfs connection would be broken without hostNetwork setting
-      dnsPolicy: Default  # available values: Default, ClusterFirstWithHostNet, ClusterFirst
-      nodeSelector:
-        kubernetes.io/os: linux
-      tolerations:
-        - operator: "Exists"
-      containers:
-        - name: liveness-probe
-          image: registry.k8s.io/sig-storage/livenessprobe:v2.6.0
-          args:
-            - --csi-address=/csi/csi.sock
-            - --probe-timeout=3s
-            - --health-port=29653
-            - --v=2
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: node-driver-registrar
-          image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.0
-          args:
-            - --v=2
-            - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-          livenessProbe:
-            exec:
-              command:
-                - /csi-node-driver-registrar
-                - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
-                - --mode=kubelet-registration-probe
-            initialDelaySeconds: 30
-            timeoutSeconds: 15
-          env:
-            - name: DRIVER_REG_SOCK_PATH
-              value: /var/lib/kubelet/plugins/csi-nfsplugin/csi.sock
-            - name: KUBE_NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: registration-dir
-              mountPath: /registration
-          resources:
-            limits:
-              memory: 100Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-        - name: nfs
-          securityContext:
-            privileged: true
-            capabilities:
-              add: ["SYS_ADMIN"]
-            allowPrivilegeEscalation: true
-          image: registry.k8s.io/sig-storage/nfsplugin:v4.0.0
-          args:
-            - "-v=5"
-            - "--nodeid=$(NODE_ID)"
-            - "--endpoint=$(CSI_ENDPOINT)"
-          env:
-            - name: NODE_ID
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: CSI_ENDPOINT
-              value: unix:///csi/csi.sock
-          ports:
-            - containerPort: 29653
-              name: healthz
-              protocol: TCP
-          livenessProbe:
-            failureThreshold: 5
-            httpGet:
-              path: /healthz
-              port: healthz
-            initialDelaySeconds: 30
-            timeoutSeconds: 10
-            periodSeconds: 30
-          imagePullPolicy: "IfNotPresent"
-          volumeMounts:
-            - name: socket-dir
-              mountPath: /csi
-            - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
-              mountPropagation: "Bidirectional"
-          resources:
-            limits:
-              memory: 300Mi
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      volumes:
-        - name: socket-dir
-          hostPath:
-            path: /var/lib/kubelet/plugins/csi-nfsplugin
-            type: DirectoryOrCreate
-        - name: pods-mount-dir
-          hostPath:
-            path: /var/lib/kubelet/pods
-            type: Directory
-        - hostPath:
-            path: /var/lib/kubelet/plugins_registry
-            type: Directory
-          name: registration-dir

deploy/v4.0.0/rbac-csi-nfs-controller.yaml

@@ -1,52 +0,0 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: csi-nfs-controller-sa
-  namespace: kube-system
-
----
-
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: nfs-external-provisioner-role
-rules:
-  - apiGroups: [""]
-    resources: ["persistentvolumes"]
-    verbs: ["get", "list", "watch", "create", "delete"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["csinodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch", "create", "update", "patch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: nfs-csi-provisioner-binding
-subjects:
-  - kind: ServiceAccount
-    name: csi-nfs-controller-sa
-    namespace: kube-system
-roleRef:
-  kind: ClusterRole
-  name: nfs-external-provisioner-role
-  apiGroup: rbac.authorization.k8s.io

docs/csi-debug.md

@@ -1,41 +0,0 @@
-## CSI driver debug tips
-
-### case#1: volume create/delete failed
- - locate csi driver pod
-```console
-$ kubectl get pod -o wide -n kube-system | grep csi-nfs-controller
-NAME                                     READY   STATUS    RESTARTS   AGE     IP             NODE
-csi-nfs-controller-56bfddd689-dh5tk      5/5     Running   0          35s     10.240.0.19    k8s-agentpool-22533604-0
-csi-nfs-controller-56bfddd689-sl4ll      5/5     Running   0          35s     10.240.0.23    k8s-agentpool-22533604-1
-```
- - get csi driver logs
-```console
-$ kubectl logs csi-nfs-controller-56bfddd689-dh5tk -c nfs -n kube-system > csi-nfs-controller.log
-```
-> note: there could be multiple controller pods, if there are no helpful logs, try to get logs from other controller pods
-
-### case#2: volume mount/unmount failed
- - locate csi driver pod that does the actual volume mount/unmount
-
-```console
-$ kubectl get pod -o wide -n kube-system | grep csi-nfs-node
-NAME                                      READY   STATUS    RESTARTS   AGE     IP             NODE
-csi-nfs-node-cvgbs                        3/3     Running   0          7m4s    10.240.0.35    k8s-agentpool-22533604-1
-csi-nfs-node-dr4s4                        3/3     Running   0          7m4s    10.240.0.4     k8s-agentpool-22533604-0
-```
-
- - get csi driver logs
-```console
-$ kubectl logs csi-nfs-node-cvgbs -c nfs -n kube-system > csi-nfs-node.log
-```
-
- - check nfs mount inside driver
-```console
-kubectl exec -it csi-nfs-node-cvgbss -n kube-system -c nfs -- mount | grep nfs
-```
-
-### troubleshooting connection failure on agent node
-```console
-mkdir /tmp/test
-mount -v -t nfs -o ... nfs-server:/path /tmp/test
-```