infrastructure/clusters/cl01tl/manifests/democratic-csi-synology-iscsi/Deployment-democratic-csi-synology-iscsi-controller.yaml

kind: Deployment
apiVersion: apps/v1
metadata:
  name: democratic-csi-synology-iscsi-controller
  namespace: democratic-csi-synology-iscsi
  labels:
    app.kubernetes.io/name: democratic-csi
    helm.sh/chart: democratic-csi-0.15.1
    app.kubernetes.io/instance: democratic-csi-synology-iscsi
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/csi-role: "controller"
    app.kubernetes.io/component: "controller-linux"
spec:
  replicas: 3
  selector:
    matchLabels:
      app.kubernetes.io/name: democratic-csi
      app.kubernetes.io/instance: democratic-csi-synology-iscsi
      app.kubernetes.io/managed-by: Helm
      app.kubernetes.io/csi-role: "controller"
      app.kubernetes.io/component: "controller-linux"
  template:
    metadata:
      annotations:
        checksum/configmap: c7cd7ac2751338c4957a9678cf357d90d0c8b64e47ef9934e0add8943f6d8df1
      labels:
        app.kubernetes.io/name: democratic-csi
        app.kubernetes.io/instance: democratic-csi-synology-iscsi
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/csi-role: "controller"
        app.kubernetes.io/component: "controller-linux"
    spec:
      serviceAccount: democratic-csi-synology-iscsi-controller-sa
      priorityClassName: "system-cluster-critical"
      hostNetwork: false
      dnsPolicy: ClusterFirst
      hostAliases: []
      hostIPC: false
      containers:
        - name: external-attacher
          image: "registry.k8s.io/sig-storage/csi-attacher:v4.11.0@sha256:b74b05b39501565022883fc128002b4cb857a7bb6c858606bcb3fdedba0b0b80"
          args:
            - --v=5
            - --leader-election
            - --leader-election-namespace=democratic-csi-synology-iscsi
            - --timeout=90s
            - --worker-threads=10
            - --csi-address=/csi-data/csi.sock
          volumeMounts:
            - mountPath: /csi-data
              name: socket-dir
        - name: external-provisioner
          image: "registry.k8s.io/sig-storage/csi-provisioner:v3.6.4@sha256:e7ad666f1d9b0caa077c7f0c157c9f87d1e73858390732496f66dcc716ff10c5"
          args:
            - --v=5
            - --leader-election
            - --leader-election-namespace=democratic-csi-synology-iscsi
            - --timeout=90s
            - --worker-threads=10
            - --extra-create-metadata
            - --csi-address=/csi-data/csi.sock
          volumeMounts:
            - mountPath: /csi-data
              name: socket-dir
          env:
            - name: NODE_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: spec.nodeName
            - name: NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.name
        - name: external-resizer
          image: "registry.k8s.io/sig-storage/csi-resizer:v1.9.4@sha256:522911ef68bd2c5c17d90fb2a6d2b2fb72ae790f2c1463a466b4262a07fdbf5a"
          args:
            - --v=5
            - --leader-election
            - --leader-election-namespace=democratic-csi-synology-iscsi
            - --timeout=90s
            - --workers=10
            - --csi-address=/csi-data/csi.sock
          volumeMounts:
            - mountPath: /csi-data
              name: socket-dir
          env:
            - name: NODE_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: spec.nodeName
            - name: NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.name
        - name: external-snapshotter
          image: "registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0@sha256:da081c27e8a6d91f36042c1942362d0515ced8d06e18c11b8f893e58c4d6d797"
          args:
            - --v=5
            - --leader-election
            - --leader-election-namespace=democratic-csi-synology-iscsi
            - --timeout=90s
            - --worker-threads=10
            - --csi-address=/csi-data/csi.sock
          volumeMounts:
            - mountPath: /csi-data
              name: socket-dir
          env:
            - name: NODE_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: spec.nodeName
            - name: NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.name
        - name: csi-driver
          image: "ghcr.io/democratic-csi/democratic-csi:latest"
          args:
            - --csi-version=1.5.0
            - --csi-name=org.democratic-csi.iscsi-synology
            - --driver-config-file=/config/driver-config-file.yaml
            - --log-level=info
            - --csi-mode=controller
            - --server-socket=/csi-data/csi.sock.internal
          env:
            - name: NODE_EXTRA_CA_CERTS
              value: "/tmp/certs/extra-ca-certs.crt"
          livenessProbe:
            failureThreshold: 3
            exec:
              command:
                - bin/liveness-probe
                - --csi-version=1.5.0
                - --csi-address=/csi-data/csi.sock.internal
            initialDelaySeconds: 10
            timeoutSeconds: 15
            periodSeconds: 60
          volumeMounts:
            - name: socket-dir
              mountPath: /csi-data
            - name: config
              mountPath: /config
            - name: extra-ca-certs
              mountPath: /tmp/certs
        - name: csi-proxy
          image: "ghcr.io/democratic-csi/csi-grpc-proxy:v0.5.7"
          env:
            - name: BIND_TO
              value: "unix:///csi-data/csi.sock"
            - name: PROXY_TO
              value: "unix:///csi-data/csi.sock.internal"
          volumeMounts:
            - mountPath: /csi-data
              name: socket-dir
      volumes:
        - name: socket-dir
          emptyDir: {}
        - name: config
          secret:
            secretName: synology-iscsi-config-secret
        - name: extra-ca-certs
          configMap:
            name: democratic-csi-synology-iscsi
            items:
              - key: extra-ca-certs
                path: extra-ca-certs.crt
      nodeSelector:
        kubernetes.io/os: linux