2 baseRepo: mcr.microsoft.com
4 repository: cgr.dev/chainguard-private/azurefile-csi
6 pullPolicy: IfNotPresent
8 repository: cgr.dev/chainguard-private/kubernetes-csi-external-provisioner
9 tag: 6.4.0-r2@sha256:2723dfb2560f1bc121550468a31aa00a0802e156dbc543b05063e009650d9e62
10 pullPolicy: IfNotPresent
12 repository: cgr.dev/chainguard-private/kubernetes-csi-external-resizer
13 tag: 2.3.0-r4@sha256:119ffe355da25e8bbd4946087bbf28dc66677e4afd7d2d9127106602d934a0c1
14 pullPolicy: IfNotPresent
16 repository: cgr.dev/chainguard-private/kubernetes-csi-livenessprobe
17 tag: 2.20.0-r3@sha256:10220815f3db1e68b2a2a05513aec881b1fdb847d0b95d81df5a80904c7bbbdd
18 pullPolicy: IfNotPresent
20 repository: cgr.dev/chainguard-private/kubernetes-csi-node-driver-registrar
21 tag: 2.18.0-r4@sha256:e27d3b146fe607ed51c8fbbb377f605f3548c91bc8842d95261b874432ee392a
22 pullPolicy: IfNotPresent
23## Reference to one or more secrets to be used when pulling images
24## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
26# - name: myRegistryKeySecretName
28# -- Custom labels to add into metadata
30# k8s-app: azurefile-csi-driver
33 create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
34 controller: csi-azurefile-controller-sa # Name of Service Account to be created or used
35 node: csi-azurefile-node-sa # Name of Service Account to be created or used
36 snapshotController: csi-snapshot-controller-sa # Name of Service Account to be created or used
41 name: csi-azurefile-controller
42 cloudConfigSecretName: azure-cloud-provider
43 cloudConfigSecretNamespace: kube-system
44 allowEmptyCloudConfig: true
46 strategyType: RollingUpdate
47 hostNetwork: true # this setting could be disabled if controller does not depend on MSI setting
52 runOnControlPlane: false
99 - key: "node-role.kubernetes.io/master"
102 - key: "node-role.kubernetes.io/controlplane"
105 - key: "node-role.kubernetes.io/control-plane"
108 - key: "CriticalAddonsOnly"
112 strategyType: RollingUpdate
114 cloudConfigSecretName: azure-cloud-provider
115 cloudConfigSecretNamespace: kube-system
116 allowEmptyCloudConfig: true
117 allowInlineVolumeKeyAccessWithIdentity: false
118 enableKataCCMount: false
119 enableManagedIdentityAuth: true
126 initialDelaySeconds: 20
131 useAZNFSForNFSMounts: false # When enabled for NFS shares, the driver will mount NFS shares through azurefile-proxy using aznfs (requires node.azurefileProxy.enabled=true).
134 installAznfsMount: true
135 migrateK8sRepo: false
140 repository: cgr.dev/chainguard-private/kubernetes-csi-external-snapshotter
142 pullPolicy: IfNotPresent
143 csiSnapshotController:
144 repository: cgr.dev/chainguard-private/kubernetes-csi-external-snapshot-controller
145 tag: 8.7.0-r2@sha256:00934b1f76862aed0d20243adc28473058be74bf4284cffc997711cf875b09c9
146 pullPolicy: IfNotPresent
148 name: csi-snapshot-controller
150 strategyType: RollingUpdate
163 enableGetVolumeStats: true
164 enableVolumeMountGroup: true
165 fsGroupPolicy: ReadWriteOnceWithFSType
166 requiresRepublish: true
168 name: file.csi.azure.com
170 userAgentSuffix: "OSS-helm"
171 azureGoSDKLogLevel: "" # available values: ""(no logs), DEBUG, INFO, WARNING, ERROR
176 dsName: csi-azurefile-node # daemonset name
177 dnsPolicy: Default # available values: Default, ClusterFirst, ClusterFirstWithHostNet, None
178 kubelet: /var/lib/kubelet
180 distro: debian # available values: debian, fedora
181 mountPermissions: 0777
217 requiredDuringSchedulingIgnoredDuringExecution:
226 useHostProcessContainers: true
227 dsName: csi-azurefile-node-win # daemonset name
228 kubelet: 'C:\var\lib\kubelet'
230 enableRegistrationProbe: true
255 - key: "node.kubernetes.io/os"
261 requiredDuringSchedulingIgnoredDuringExecution:
270 # [optional] If the AAD application or user-assigned managed identity is not in the same tenant as the cluster
271 # then set tenantID with the application or user-assigned managed identity tenant ID
273azureCredentialFileConfigMap: azure-cred-file