Questions tagged [csi-driver]
21 questions
0
votes
1 answer
Too many GRPC calls for create snapshot
In our CSI Driver, we recently included snapshot feature support. Using v6.0.1 external-snapshotter. I see that when we do a create snapshot action, too many GRPC calls are seen in the logs for csi.v1.Controller/CreateSnapshot
cat driver.log | grep…
ambikanair
- 4,004
- 11
- 43
- 83
0
votes
0 answers
Kubernetes Volume snapshot: Why is restoresize when we list snapshot not in sync with actual volume size
I created a PVC and wrote 50G of data to the volume after mounting it to a pod.
Created volumesnapshot and restored volume from snapshot.
Verified 50G of data is present in new volume from second application pod.
Now when I do kubectl get…
ambikanair
- 4,004
- 11
- 43
- 83
0
votes
0 answers
Azure Kubernetes Service - Pod Managed Identity and Workload Identity Alternatives
Currently Azure Kubernetes Services pod managed identity and workload identities are not GA. I am working on a solution that needs to be production ready for my enterprise. Since these features are in preview, they don't seem like a good fit.
I…
azure-techie
- 1
- 2
0
votes
1 answer
Scale statefulset based on latest volumeSnapshot
If anyone know solutions please help me how I can do this.
I have “statefulset” which has following “volumeClaimTemplates” inside:
When I scale my replica count:
“kubectl scale statefulset --replicas=2 my-statefulset”
new “PVC” create from…
0
votes
1 answer
Using Mount Propagation bidirectional without Privileged Security context in kubernetes
I'm implementing support to a CSIDriver that uses Bidirectional Mount Propagation. This requires that the container be Privileged, but in this project, we are not allowed to use privileged containers.
There is any other way to do this? I've tried to…
Vitor Estevam
- 183
- 1
- 11
0
votes
1 answer
General Discussion: CSI Driver for Kubernetes and Azure Key Vault vs keeping Secrets in Memory
as stated in the title I have a general question about securely retrieving secrets from Azure KeyVault.
Currently most of my secrets are stored in Kubernetes Secrets. As Secrets are only base64 encoded it is possible for a malicious user or even…
Pascal Kohl
- 1
- 1