Sample Driver that provides reference implementation for Container Object Storage Interface (COSI) API for Ceph Object Store aka RADOS Gateway (RGW)
$ kubectl create -k github.com/kubernetes-sigs/container-object-storage-interface-api
$ kubectl create -k github.com/kubernetes-sigs/container-object-storage-interface-controller
Following pods will running in the default namespace :
NAME READY STATUS RESTARTS AGE
objectstorage-controller-6fc5f89444-4ws72 1/1 Running 0 2d6h
Code can be compiled using:
$ make build
Now build docker image and provide tag as ceph/ceph-cosi-driver:latest
$ make container
Sending build context to Docker daemon 41.95MB
Step 1/5 : FROM gcr.io/distroless/static:latest
---> 1d9948f921db
Step 2/5 : LABEL maintainers="Ceph COSI Authors"
---> Using cache
---> 8659e9813ec5
Step 3/5 : LABEL description="Ceph COSI driver"
---> Using cache
---> 0c55b21ff64f
Step 4/5 : COPY ./cmd/ceph-cosi-driver/ceph-cosi-driver ceph-cosi-driver
---> a21275402998
Step 5/5 : ENTRYPOINT ["/ceph-cosi-driver"]
---> Running in 620bfa992683
Removing intermediate container 620bfa992683
---> 09575229056e
Successfully built 09575229056e
docker tag ceph-cosi-driver:latest ceph/ceph-cosi-driver:latest
Now start the sidecar and cosi driver with:
$ kubectl apply -k .
$ kubectl -n ceph-cosi-driver get pods
NAME READY STATUS RESTARTS AGE
objectstorage-provisioner-6c8df56cc6-lqr26 2/2 Running 0 26h
$ kubectl create -f examples/bucketclass.yaml
$ kubectl create -f examples/bucketclaim.yaml
$ kubectl create -f examples/bucketaccessclass.yaml
$ kubectl create -f examples/bucketaccess.yaml
Need to provide access details for RGW server via secret and it needs to be referenced in BucketAccessClass and BucketClass.
parameters:
ObjectStoreUserSecretName: <secret name>
ObjectStoreNamespace: <namespace>In the app, credentials can be consumed as secrte volume mount using the secret name specified in the BucketAccess:
spec:
containers:
volumeMounts:
- name: cosi-secrets
mountPath: /data/cosi
volumes:
- name: cosi-secrets
secret:
secretName: sample-access-secretAn example for awscli pods can be found at examples/awscliapppod.yaml. Credentials will be in json format in the file.
{
apiVersion: "v1alpha1",
kind: "BucketInfo",
metadata: {
name: "ba-$uuid"
},
spec: {
bucketName: "ba-$uuid",
authenticationType: "KEY",
endpoint: "https://rook-ceph-my-store:443",
accessKeyID: "AKIAIOSFODNN7EXAMPLE",
accessSecretKey: "wJalrXUtnFEMI/K...",
region: "us-east-1",
protocols: [
"s3"
]
}
}- Handle access policies for Bucket Access Request
- Increase unit tests coverage and CI job for integration tests
You can reach the maintainers of this project at:
Participation in the Kubernetes community is governed by the Kubernetes Code of Conduct.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent