History

Erwan Miran 7bec169d58 Fix ansible syntax to avoid ansible deprecation warnings (#3512 ) * failed * version_compare * succeeded * skipped * success * version_compare becomes version since ansible 2.5 * ansible minimal version updated in doc and spec * last version_compare		2018-10-16 15:33:30 -07:00
..
defaults	cephfs-provisioner: Upgrade to 06fddbe2	2018-07-03 10:15:24 +08:00
tasks	psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true	2018-08-22 18:16:13 +02:00
templates	Fix ansible syntax to avoid ansible deprecation warnings (#3512 )	2018-10-16 15:33:30 -07:00
README.md	remove the redundant space (#3420 )	2018-09-29 21:03:27 -07:00

README.md

CephFS Volume Provisioner for Kubernetes 1.5+

Using Ceph volume client

Development

Compile the provisioner

make

Make the container image and push to the registry

make push

Test instruction

Start Kubernetes local cluster

See https://kubernetes.io/.

Create a Ceph admin secret

ceph auth get client.admin 2>&1 |grep "key = " |awk '{print  $3'} |xargs echo -n > /tmp/secret
kubectl create ns cephfs
kubectl create secret generic ceph-secret-admin --from-file=/tmp/secret --namespace=cephfs

Start CephFS provisioner

The following example uses cephfs-provisioner-1 as the identity for the instance and assumes kubeconfig is at /root/.kube. The identity should remain the same if the provisioner restarts. If there are multiple provisioners, each should have a different identity.

docker run -ti -v /root/.kube:/kube -v /var/run/kubernetes:/var/run/kubernetes --privileged --net=host cephfs-provisioner /usr/local/bin/cephfs-provisioner -master=http://127.0.0.1:8080 -kubeconfig=/kube/config -id=cephfs-provisioner-1

Alternatively, deploy it in kubernetes, see deployment.

Create a CephFS Storage Class

Replace Ceph monitor's IP in example/class.yaml with your own and create storage class:

kubectl create -f example/class.yaml

Create a claim

kubectl create -f example/claim.yaml

Create a Pod using the claim

kubectl create -f example/test-pod.yaml

Known limitations

Kernel CephFS doesn't work with SELinux, setting SELinux label in Pod's securityContext will not work.
Kernel CephFS doesn't support quota or capacity, capacity requested by PVC is not enforced or validated.
Currently each Ceph user created by the provisioner has allow r MDS cap to permit CephFS mount.

Acknowledgement

Inspired by CephFS Manila provisioner and conversation with John Spray