Questions tagged [csi-driver]

21 questions
3
votes
0 answers

Why enabling addons on EKS is so slow?

Enabling aws-ebs-csi-driver via terraform takes 15 minutes each time. It slows down our pipeline and even caused few problems with some tokens being expired. I could not find any documentation about how exactly EKS addons works. Effectively what I…
Piotr
  • 317
  • 1
  • 13
2
votes
1 answer

How to inject Kubernetes Volume secrets also as Env variable to the Pod?

My goal is to create an environment variable for the pod out of a mounted secret volume. I want to skip the intermediate step with creating Kubernetes secret (and refer the k8s secret for the env) so nothing is stored on the etcd storage. I am using…
1
vote
1 answer

Mount secrets volumes with CSI driver and vault provider in kubernetes when the pod has a toleration and affinity

I have a kubernetes cluster with two node groups in AWS. One for Spot instances and the other for on demand instances. I have installed Vault and CSI driver to manage the secrets. When I create this deployment everything works fine, the pods are…
1
vote
0 answers

Helm uninstall removing CSIDriver before deployments made pod stuck at "Terminating"

I'm using a CSIDriver with three workloads and Helm to manage my cluster. When i run helm uninstall {chart} these three pods get stucked at terminating status forever. Looking at the logs I saw that the CSIDrivers is been delete before the…
1
vote
0 answers

How does SyncSecret in secret-store-csi-driver works?

How does SyncSecret in secret-store-csi-driver works? If we make changes in kubernetes secrets, will it reflects in aws secret-managers? I know about the vice-versa it is true.
1
vote
0 answers

How can a GKE persistent volume's provisioner be changed to use a CSI driver?

Our GKE PersistentVolumes were provisioned with kubernetes.io/gce-pd, but we want to take snapshots of our PVs using VolumeSnapshot. The documentation states that "VolumeSnapshot support is only available for CSI drivers." In order to use…
0
votes
0 answers

Kubernetes secret csi driver restrict secrets in pod

I am using Kubernetes CSI Secret store driver to connect my AKS to my Keyvault. When mounting my the class inside my pods, the volume contains all the secrets (specified in the class yaml). These secrets are now handed over to different apps, yet I…
Bennimi
  • 416
  • 5
  • 14
0
votes
1 answer

What are the options supported in CSIDriver kubernetes object

https://kubernetes-csi.github.io/docs/csi-driver-object.html gives details on CSIDriver object. Is there a way we can customize the parameters in this object. I tested but it fails with Error from server (BadRequest): error when creating…
ambikanair
  • 4,004
  • 11
  • 43
  • 83
0
votes
0 answers

Sync AWS Secrets manager with Kubernetes secrets on local not working when using minikube and localstack

I am trying to configure AWS secrets with my kubernetes cluster in such a way that I can expose secrets as environment variable in my deployment file OS: Mac I am using minikube for local testing For AWS I am using localstack secrets manager I have…
0
votes
0 answers

fetching secret from external vault into kubernetes rancher Cluster

Our goal is to fetch the secret from Hashicorp Vault into kubernetes cluster so secret will be encrypted and we won't save any secret data on anywhere. Trying to use SecretProviderClass way and did the installation with Helm chart. Deploying all…
prakasun
  • 103
  • 1
  • 5
0
votes
2 answers

Create Kubernetes Secrets from Azure Keyvault

I am trying to create kubernetes secrets by retrieving the secret data from azure keyvault. I know that there is the secrets store csi driver, but this plugin allows me to read secrets from KeyVault, and make them available as volume mounts only,…
Jerald Baker
  • 1,121
  • 1
  • 12
  • 48
0
votes
1 answer

GKE: Failed to create snapshot content with error cannot find CSI PersistentVolumeSource

I am setting up a backup solution in GKE for my Redis cluster and I get this error when I try to use VolumeSnapshot object in K8s. I have enabled the the CSI driver addon in the cluster and I deployed the Redis cluster with Bitnami chart and also…
0
votes
0 answers

How AKS Will store snapshots of pvc in another resource group

By default, snapshot of pvc will be stored in the same resource group. What permissions are required to store the snapshot in different Resource group
0
votes
0 answers

How to use an existing filestore instance with Kubernetes CSI driver

I have an existing filestore which I was using as an NFS mount in the pods in ReadWriteMany mode. I wanted to move to use CSI driver. But when I tried using the Google documentation for the same https://cloud.google.com/filestore/docs/csi-driver .…
Amol
  • 479
  • 5
  • 18
0
votes
0 answers

Waiting for CSI driver to reconcile volumesnapshot

We have a kubernetes cluster on EKS and we wanted to take backup of some resources. We used velero for the same and it was working fine for EBS volumes but EFS were not getting backed up. On further research we found the we need to install CSI…
Vijay_Yadav
  • 107
  • 1
  • 9
1
2