31 lines
951 B
YAML
31 lines
951 B
YAML
{{- $labels := dict }}
|
|
{{- if (dig "openshift" false .Values.global) }}
|
|
{{- $_ := set $labels "security.openshift.io/csi-ephemeral-volume-profile" "restricted" }}
|
|
{{- end }}
|
|
{{- $labels = mergeOverwrite $labels .Values.csiDriverLabels }}
|
|
apiVersion: storage.k8s.io/v1
|
|
kind: CSIDriver
|
|
metadata:
|
|
name: {{ .Values.pluginName | quote }}
|
|
{{- with $labels }}
|
|
labels:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
|
|
spec:
|
|
# Only ephemeral, inline volumes are supported. There is no need for a
|
|
# controller to provision and attach volumes.
|
|
attachRequired: false
|
|
|
|
# Request the pod information which the CSI driver uses to verify that an
|
|
# ephemeral mount was requested.
|
|
podInfoOnMount: true
|
|
|
|
# Don't change ownership on the contents of the mount since the Workload API
|
|
# Unix Domain Socket is typically open to all (i.e. 0777).
|
|
fsGroupPolicy: None
|
|
|
|
# Declare support for ephemeral volumes only.
|
|
volumeLifecycleModes:
|
|
- Ephemeral
|