Skip to content

Commit c51dbd4

Browse files
committed
Make hostNetwork configurable on node daemonset
This is required to support custom CNIs (such as Cilium) where the IPs are not allocated from the VPC CIDR block.
1 parent aaac3de commit c51dbd4

File tree

6 files changed

+7
-2
lines changed

6 files changed

+7
-2
lines changed

charts/aws-fsx-openzfs-csi-driver/templates/node-daemonset.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,7 @@ spec:
171171
- name: {{ . }}
172172
{{- end }}
173173
{{- end }}
174+
hostNetwork: {{ .Values.node.hostNetwork }}
174175
dnsPolicy: {{ .Values.node.dnsPolicy }}
175176
{{- with .Values.node.dnsConfig }}
176177
dnsConfig: {{- toYaml . | nindent 8 }}

charts/aws-fsx-openzfs-csi-driver/values.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -176,6 +176,7 @@ node:
176176
operator: NotIn
177177
values:
178178
- fargate
179+
hostNetwork: false
179180
dnsPolicy: ClusterFirst
180181
dnsConfig: {}
181182
# Example config which uses the AWS nameservers

deploy/kubernetes/base/clusterrole-csi-node.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ apiVersion: rbac.authorization.k8s.io/v1
55
metadata:
66
name: fsx-openzfs-csi-node-role
77
labels:
8-
app.kubernetes.io/name: aws-fsx-openzfs-csi-driver
8+
app.kubernetes.io/part-of: aws-fsx-openzfs-csi-driver
99
rules:
1010
- apiGroups: [""]
1111
resources: ["nodes"]

deploy/kubernetes/base/clusterrolebinding-csi-node.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ apiVersion: rbac.authorization.k8s.io/v1
55
metadata:
66
name: fsx-openzfs-csi-node-getter-binding
77
labels:
8-
app.kubernetes.io/name: aws-fsx-openzfs-csi-driver
8+
app.kubernetes.io/part-of: aws-fsx-openzfs-csi-driver
99
subjects:
1010
- kind: ServiceAccount
1111
name: fsx-openzfs-csi-node-sa

deploy/kubernetes/base/node-daemonset.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,7 @@ spec:
127127
securityContext:
128128
allowPrivilegeEscalation: false
129129
readOnlyRootFilesystem: true
130+
hostNetwork: false
130131
dnsPolicy: ClusterFirst
131132
volumes:
132133
- name: kubelet-dir

docs/install.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,8 @@ EKS Managed Node Groups support automatically tainting nodes, see [here](https:/
9696
### Deploy driver
9797
You may deploy the FSx for OpenZFS CSI driver via Kustomize or Helm
9898

99+
*Note: When using custom [CNI Plugins](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/) (e.g. Cilium) you might have to enable host networking for mounting the filesystem successfully.*
100+
99101
#### Kustomize
100102
```sh
101103
kubectl apply -k "github.com/kubernetes-sigs/aws-fsx-openzfs-csi-driver/deploy/kubernetes/overlays/stable/?ref=release-1.1"

0 commit comments

Comments
 (0)