-
Notifications
You must be signed in to change notification settings - Fork 1.9k
OSDOCS-16947#CQA work Stor3 - CSI basics #114248
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
lpettyjo
wants to merge
1
commit into
openshift:main
Choose a base branch
from
lpettyjo:OSDOCS-16947-csi-basics
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -7,38 +7,31 @@ | |
| [id="external-csi-contollers_{context}"] | ||
| = External CSI controllers | ||
|
|
||
| External CSI controllers is a deployment that deploys one or more pods | ||
| with five containers: | ||
| [role="_abstract"] | ||
| External Container Storage Interface (CSI) controllers run as deployments with containers handling volume provisioning, deletion, attachment, snapshotting, and resizing. Controller pods communicate with CSI drivers using UNIX Domain Sockets and run on infrastructure nodes to protect credentials. | ||
|
|
||
| External CSI controllers is a deployment that deploys one or more pods with five containers: | ||
|
|
||
| * The snapshotter container watches `VolumeSnapshot` and `VolumeSnapshotContent` objects and is responsible for the creation and deletion of `VolumeSnapshotContent` object. | ||
|
|
||
| * The resizer container is a sidecar container that watches for `PersistentVolumeClaim` updates and triggers `ControllerExpandVolume` operations against a CSI endpoint if you request more storage on `PersistentVolumeClaim` object. | ||
| * An external CSI attacher container translates `attach` and `detach` | ||
| calls from {product-title} to respective `ControllerPublish` and | ||
|
|
||
| * An external CSI attacher container translates `attach` and `detach` calls from {product-title} to respective `ControllerPublish` and | ||
| `ControllerUnpublish` calls to the CSI driver. | ||
| * An external CSI provisioner container that translates `provision` and | ||
| `delete` calls from {product-title} to respective `CreateVolume` and | ||
| `DeleteVolume` calls to the CSI driver. | ||
|
|
||
| * An external CSI provisioner container that translates `provision` and `delete` calls from {product-title} to respective `CreateVolume` and `DeleteVolume` calls to the CSI driver. | ||
|
|
||
| * A CSI driver container. | ||
|
|
||
| The CSI attacher and CSI provisioner containers communicate with the CSI | ||
| driver container using UNIX Domain Sockets, ensuring that no CSI | ||
| communication leaves the pod. The CSI driver is not accessible from | ||
| outside of the pod. | ||
| The CSI attacher and CSI provisioner containers communicate with the CSI driver container using UNIX Domain Sockets, ensuring that no CSI | ||
| communication leaves the pod. The CSI driver is not accessible from outside of the pod. | ||
|
|
||
| [NOTE] | ||
| ==== | ||
| The `attach`, `detach`, `provision`, and `delete` operations typically require | ||
| the CSI driver to use credentials to the storage backend. Run the CSI | ||
| controller pods on infrastructure nodes so the credentials are never leaked | ||
| to user processes, even in the event of a catastrophic security breach | ||
| on a compute node. | ||
| The `attach`, `detach`, `provision`, and `delete` operations typically require the CSI driver to use credentials to the storage backend. Run the CSI controller pods on infrastructure nodes so the credentials are never leaked to user processes, even in the event of a catastrophic security breach on a compute node. | ||
|
Collaborator
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🤖 [error] RedHat.TermsErrors: Use 'in case', 'if', or 'when' rather than 'in the event'. For more information, see RedHat.TermsErrors. |
||
| ==== | ||
|
|
||
| [NOTE] | ||
| ==== | ||
| The external attacher must also run for CSI drivers that do not support | ||
| third-party `attach` or `detach` operations. The external attacher will | ||
| not issue any `ControllerPublish` or `ControllerUnpublish` operations to | ||
| the CSI driver. However, it still must run to implement the necessary | ||
| {product-title} attachment API. | ||
| The external attacher must also run for CSI drivers that do not support third-party `attach` or `detach` operations. The external attacher does not issue any `ControllerPublish` or `ControllerUnpublish` operations to the CSI driver. However, it still must run to implement the necessary {product-title} attachment API. | ||
| ==== | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🤖 [error] RedHat.TermsErrors: Use 'on-demand' rather than 'on demand'. For more information, see RedHat.TermsErrors.