Kubernetes Object Name | Type | Default Resource Usage | Associated Namespaces |
goosefs-csi-controller | Deployment | 0.02-core CPU, 220 MB memory | kube-system |
goosefs-csi-nodeplugin | DaemonSet | 0.06-core CPU, 270 MB memory | kube-system |
csi-goosefs-controller | ServiceAccount | - | kube-system |
csi-goosefs-controller | ClusterRole | - | - |
csi-goosefs-controller | ClusterRoleBinding | - | - |
csi-goosefs-node | ServiceAccount | - | kube-system |
csi-goosefs-node | ClusterRole | - | - |
csi-goosefs-node | ClusterRoleBinding | - | - |
goosefs-csi-fuse-config | ConfigMap | - | kube-system |
com.tencent.cloud.csi.goosefs | CSIDriver | - | - |
/var/lib/kubelet on the host to the container to complete volume mount/umount operations, so you need to enable privileged containers.Function | Involved Object | Involved Operation Permissions |
Create and delete disks based on information such as pvc/pv. | nodes/csinodes/storageclasses/volumesnapshots/volumesnapshotcontents | get/watch/list |
| PersistentVolumeClaim | get/watch/list/update |
| PersistentVolume | get/watch/list/create/delete |
Support multiple controller replicas through the kubernetes lease mechanism. | leases | get/list/watch/create/update/patch/delete |
Function | Involved Object | Involved Operation Permissions |
Start and delete the companion pod for goosefs fuse mounting | pods | create/delete |
kind: ClusterRoleapiVersion: rbac.authorization.k8s.io/v1metadata:name: csi-goosefs-controllerrules:- apiGroups: [""]resources: ["persistentvolumes"]verbs: ["get", "list", "watch", "create", "delete"]- apiGroups: [""]resources: ["persistentvolumeclaims"]verbs: ["get", "list", "watch", "update"]- apiGroups: ["storage.k8s.io"]resources: ["storageclasses"]verbs: ["get", "list", "watch"]- apiGroups: [""]resources: ["events"]verbs: ["list", "watch", "create", "update", "patch"]- apiGroups: ["snapshot.storage.k8s.io"]resources: ["volumesnapshots"]verbs: ["get", "list"]- apiGroups: ["snapshot.storage.k8s.io"]resources: ["volumesnapshotcontents"]verbs: ["get", "list"]- apiGroups: ["storage.k8s.io"]resources: ["csinodes"]verbs: ["get", "list", "watch"]- apiGroups: [""]resources: ["nodes"]verbs: ["get", "list", "watch"]- apiGroups: ["coordination.k8s.io"]resources: ["leases"]verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
kind: ClusterRoleapiVersion: rbac.authorization.k8s.io/v1metadata:name: csi-goosefs-noderules:- apiGroups: [""]resources: ["pods"]verbs: ["create", "delete"]
Apakah halaman ini membantu?
Anda juga dapat Menghubungi Penjualan atau Mengirimkan Tiket untuk meminta bantuan.
masukan