Comments (3)
pohly
commented on August 30, 2024
The built-in roles are obsolete. Building RBAC rules for an external component with an independent release cycle into Kubernetes core was a conceptual dead-end. I think we (I?) added a deprecation note for them in an older Kubernetes release; it might be okay to remove them now.
Whoever puts together a CSI driver deployment (usually the storage vendor) must ensure that the deployment has its own matching RBAC rules. This may imply editing the upstream RBAC rules, because they depend on how the component is used in the deployment. For example: https://github.com/kubernetes-csi/external-provisioner/blob/967b7a310b197d3294b52af84a195b45b9a0e1d2/deploy/kubernetes/rbac.yaml#L24-L28
from external-attacher.
verult
commented on August 30, 2024
@pohly could you check when the deprecation note was added? Is there a tracking issue for removing them?
edit: Ah it was deprecated in 1.13. Will open an issue on k/k to remove in 1.17.
from external-attacher.
verult
commented on August 30, 2024
from external-attacher.
Related Issues (20)
- Attachment reconciler is incorrectly using nodeid annotation HOT 5
- Retry on attach error does not respect exponential backoff
- csi-attacher:v3.4.0 image unavailable HOT 1
- change default fstype from "ext4" to empty string HOT 4
- Single timeout for attachment/detachment and reconcile resync operations not always appropriate HOT 20
- Emit events on detach errors HOT 18
- Version 3.5.0 vulnerability with CVE-2022-1996 HOT 11
- Question about reconciling (reconcileVA) based on RPC_LIST_VOLUMES_PUBLISHED_NODES HOT 6
- Broken link of `contributor cheat sheet` needs to fix
- csi attacher report panic in log HOT 5
- Uncertain handling for attach HOT 15
- VolumeAttachment has attached status true but actual state false HOT 12
- Readme has incorrect compatibility information for kubernetes version HOT 5
- 7 High Security vulnerability on latest CSI-attacher:v4.3.0 sidecar image HOT 7
- `fault.CnsNotRegisteredFault.summary` while consuming a volume by a pod HOT 2
- Attacher doesn't allow to set volumes limit in the ListVolume request
- VolumeAttachment takes too long to remove HOT 6
- ListVolumes : Panic detected on v4.4.1 HOT 5
- CSI attacher: Does version 2.2.1 have an ARM architecture? What is the download address? Thank you HOT 4
- Upgrade external-attacher to use Debian 12 Distroless HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from external-attacher.