Skip to content

Instantly share code, notes, and snippets.

@tennix

tennix/local_volume_provisioner-gce_ssd.yaml

Last active March 21, 2020 14:50
Show Gist options
  • Save tennix/528d7e907526a3aeae9c5291a8e3a26c to your computer and use it in GitHub Desktop.
Save tennix/528d7e907526a3aeae9c5291a8e3a26c to your computer and use it in GitHub Desktop.
Download ZIP
local volume provisioner for gke local ssd with nobarrier mount option
Raw
local_volume_provisioner-gce_ssd.yaml
# This file is copied from https://github.com/kubernetes-incubator/external-storage/blob/master/local-volume/provisioner/deployment/kubernetes/gce/provisioner_generated_gce_ssd_count.yaml
# but namespace is changed to `kube-system` and add a disk-remounter init container
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: "local-scsi"
provisioner: "kubernetes.io/no-provisioner"
volumeBindingMode: "WaitForFirstConsumer"
---
apiVersion: v1
kind: ConfigMap
metadata:
name: local-provisioner-config
namespace: kube-system
data:
useNodeNameOnly: "true"
storageClassMap: |
local-scsi:
hostDir: /mnt/disks
mountDir: /mnt/disks
---
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
name: local-volume-provisioner
namespace: kube-system
labels:
app: local-volume-provisioner
spec:
selector:
matchLabels:
app: local-volume-provisioner
template:
metadata:
labels:
app: local-volume-provisioner
spec:
serviceAccountName: local-storage-admin
initContainers:
- name: disk-remounter # add nobarrier mount option to local ssd disks
image: "quay.io/external_storage/local-volume-provisioner:v2.2.0"
imagePullPolicy: "Always"
securityContext:
privileged: true
command:
- /bin/bash
- -c
- |
set -euo pipefail
mount | grep -v nobarrier | awk '/ssd/{print $1}' | xargs -i mount {} -o remount,nobarrier
volumeMounts:
- mountPath: /mnt/disks
name: local-scsi
containers:
- image: "quay.io/external_storage/local-volume-provisioner:v2.2.0"
imagePullPolicy: "Always"
name: provisioner
securityContext:
privileged: true
env:
- name: MY_NODE_NAME
valueFrom:
fieldRef:
fieldPath: spec.nodeName
volumeMounts:
- mountPath: /etc/provisioner/config
name: provisioner-config
readOnly: true
- mountPath: /mnt/disks
name: local-scsi
volumes:
- name: provisioner-config
configMap:
name: local-provisioner-config
- name: local-scsi
hostPath:
path: /mnt/disks
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: local-storage-admin
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: local-storage-provisioner-pv-binding
namespace: kube-system
subjects:
- kind: ServiceAccount
name: local-storage-admin
namespace: kube-system
roleRef:
kind: ClusterRole
name: system:persistent-volume-provisioner
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: local-storage-provisioner-node-clusterrole
namespace: kube-system
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: local-storage-provisioner-node-binding
namespace: kube-system
subjects:
- kind: ServiceAccount
name: local-storage-admin
namespace: kube-system
roleRef:
kind: ClusterRole
name: local-storage-provisioner-node-clusterrole
apiGroup: rbac.authorization.k8s.io
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment