DirectorySecurity AdvisoriesPricing
Sign in
Directory
local-static-provisioner logoHELM

local-static-provisioner

Helm chart
Last changed
Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Overview
Chart versions
Default values
Chart metadata
Images

Tag:
Compare:

1
# Override the default chartname or releasename
2
nameOverride: ""
3
fullnameOverride: ""
4
rbac:
5
# rbac.create: `true` if rbac resources should be created
6
create: true
7
# list of additional rbac rules that may be needed by init containers
8
extraRules: []
9
# Defines whether to generate a serviceAccount
10
serviceAccount:
11
# serviceAccount.create: Whether to create a service account or not
12
create: true
13
# serviceAccount.name: The name of the service account to create or use
14
name: ""
15
# Indicates if PVs should be dependents of the owner Node.
16
setPVOwnerRef: false
17
# Provisioner clean volumes in process by default. If set to true, provisioner
18
# will use Jobs to clean.
19
useJobForCleaning: false
20
# Provisioner name contains Node.UID by default. If set to true, the provisioner
21
# name will only use Node.Name.
22
useNodeNameOnly: false
23
# Resync period in reflectors will be random between minResyncPeriod and
24
# 2*minResyncPeriod. Default: 5m0s.
25
#minResyncPeriod: 5m0s
26
27
# Additional volumes to create, for the default container and init containers
28
# to consume
29
additionalVolumes: []
30
# Mount the host's `/dev/` by default so that block device symlinks can be
31
# resolved by the containers
32
mountDevVolume: true
33
# Additional volumes to mount to the default container, the volumes should
34
# either be host paths or defined by additionalVolumes
35
additionalVolumeMounts: []
36
# Map of label key-value pairs to apply to the PVs created by the
37
# provisioner. Uncomment to add labels to the list.
38
#labelsForPV:
39
# pv-labels: can-be-selected
40
41
# Indicates if Windows DaemonSet should be created
42
enableWindows: false
43
# Configuration for classes of static volumes.
44
classes:
45
- name: fast-disks # Defines name of storage classes.
46
# Path on the host where local volumes of this storage class are mounted
47
# under.
48
hostDir: /mnt/fast-disks
49
# Optionally specify mount path of local volumes. By default, we use same
50
# path as hostDir in container.
51
# mountDir: /mnt/fast-disks
52
# The volume mode of created PersistentVolume object. Default to Filesystem
53
# if not specified.
54
volumeMode: Filesystem
55
# Access mode of the volume. default to ReadWriteOnce if not specified.
56
accessMode: ReadWriteOnce
57
# Filesystem type to mount.
58
# It applies only when the source path is a block device,
59
# and desire volume mode is Filesystem.
60
# Must be a filesystem type supported by the host operating system.
61
fsType: ext4
62
# File name pattern to discover. By default, discover all file names.
63
namePattern: "*"
64
# Restrict topology of provisioned volumes to specific labels
65
allowedTopologies:
66
blockCleanerCommand:
67
# Do a quick reset of the block device during its cleanup.
68
# - "/scripts/quick_reset.sh"
69
# or use dd to zero out block dev in two iterations by uncommenting these lines
70
# - "/scripts/dd_zero.sh"
71
# - "2"
72
# or run shred utility for 2 iteration.s
73
- "/scripts/shred.sh"
74
- "2"
75
# or blkdiscard utility by uncommenting the line below.
76
# - "/scripts/blkdiscard.sh"
77
# Uncomment to create storage class object with default configuration.
78
# storageClass: true
79
# Uncomment to create storage class object and configure it.
80
# storageClass:
81
# reclaimPolicy: Delete # Available reclaim policies: Delete/Retain, defaults: Delete.
82
# isDefaultClass: true # set as default class
83
# If you are using cluster autoscaler to scale the workload using volume provisioned by this storage class,
84
# set the provisioner of the storage class to another value other than the default.
85
# Ref: https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner/issues/288
86
# provisioner: kubernetes.io/no-provisioner
87
# Defines annotations for each Pod in the DaemonSet.
88
podAnnotations: {}
89
# Defines labels for each Pod in the DaemonSet.
90
podLabels: {}
91
# Defines Provisioner's image name including container registry.
92
image: cgr.dev/scratch-images/test-tmp/local-volume-provisioner:2.9.0-r4@sha256:f37973e959c35d793753b3ad5376131a26d479530c2dff1026ab899bfb7d7323
93
# Defines Image download policy, see kubernetes documentation for available values.
94
# imagePullPolicy: Always
95
96
# Defines Image pull secrets for the provisioner image.
97
imagePullSecrets: []
98
# Defines a name of the Pod Priority Class to use with the Provisioner DaemonSet
99
# Note that if you want to make it critical, specify "system-cluster-critical"
100
# or "system-node-critical" and deploy in kube-system namespace.
101
# Ref: https://k8s.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/#marking-pod-as-critical
102
#priorityClassName: system-node-critical
103
# If configured, nodeSelector will add a nodeSelector field to the DaemonSet PodSpec.
104
#
105
# NodeSelector constraint for local-volume-provisioner scheduling to nodes.
106
# Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
107
nodeSelector: {}
108
nodeSelectorWindows: {}
109
# List of node labels to be copied to the PVs created by the provisioner in a format:
110
#
111
# nodeLabels:
112
# - failure-domain.beta.kubernetes.io/zone
113
# - failure-domain.beta.kubernetes.io/region
114
#
115
# If configured, tolerations will add a toleration field to the DaemonSet PodSpec.
116
#
117
# Node tolerations for local-volume-provisioner scheduling to nodes with taints.
118
# Ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
119
tolerations: []
120
#
121
# If configured, removeNodeNotReadyTaint will add provisionerNotReadyNodeTaintKey as the toleration key
122
# to the DaemonSet PodSpec.
123
#
124
# removeNodeNotReadyTaint controls whether the provisioner should remove the provisionerNotReadyNodeTaintKey
125
# once it becomes ready.
126
removeNodeNotReadyTaint: false
127
#
128
# The key of the startup taint that provisioner will remove once it becomes ready.
129
# Ref: https://karpenter.sh/docs/concepts/nodepools/#cilium-startup-taint
130
provisionerNotReadyNodeTaintKey: "sig-storage-local-static-provisioner/agent-not-ready"
131
#
132
# If configured, affinity will add a affinity filed to the DeamonSet PodSpec.
133
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
134
affinity: {}
135
#
136
# If configured, resources will set the requests/limits field to the Daemonset PodSpec.
137
# Ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
138
resources: {}
139
# limits:
140
# memory: "512Mi"
141
# cpu: "1000m"
142
# requests:
143
# memory: "32Mi"
144
# cpu: "10m"
145
#
146
# Security context for the Linux provisioner container.
147
# This applies only to the Linux DaemonSet; the Windows DaemonSet does not
148
# render a securityContext.
149
# When set to a non-empty map/object value, this takes precedence over the legacy
150
# `privileged` field below. However, if `securityContext` does not include
151
# the `privileged` key, the legacy `privileged` value is automatically merged
152
# to preserve backward compatibility.
153
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
154
#
155
# Example:
156
# securityContext:
157
# privileged: true
158
# allowPrivilegeEscalation: true
159
securityContext: {}
160
# If set to false, the provisioner DaemonSet container will run without extra
161
# privileges. This is the legacy field; when securityContext above is a non-empty
162
# map/object and includes the `privileged` key, this field is ignored.
163
privileged: true
164
# Host PID set in the linux daemonset container spec. When set to true allows a pod to have access to the host process ID namespace
165
hostPID: false
166
# Liveness probe for the provisioner container.
167
# Uses tcpSocket to verify the process is alive without coupling to readiness state.
168
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
169
livenessProbe:
170
tcpSocket:
171
port: metrics
172
initialDelaySeconds: 10
173
periodSeconds: 60
174
timeoutSeconds: 5
175
failureThreshold: 3
176
# Readiness probe for the provisioner container.
177
readinessProbe: {}
178
# Startup probe for the provisioner container.
179
startupProbe: {}
180
# Any init containers can be configured here.
181
# Ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
182
initContainers: []
183
# Update strategy for the DaemonSet.
184
updateStrategy:
185
type: RollingUpdate
186
rollingUpdate:
187
maxUnavailable: 1
188
#
189
# Configure Prometheus monitoring
190
#
191
serviceMonitor:
192
enabled: false
193
## Interval at which Prometheus scrapes the provisioner
194
interval: 10s
195
# Namespace Prometheus is installed in defaults to release namespace
196
namespace:
197
## Defaults to whats used if you follow CoreOS [Prometheus Install Instructions](https://github.com/coreos/prometheus-operator/tree/master/helm#tldr)
198
## [Prometheus Selector Label](https://github.com/coreos/prometheus-operator/blob/master/helm/prometheus/templates/prometheus.yaml#L65)
199
## [Kube Prometheus Selector Label](https://github.com/coreos/prometheus-operator/blob/master/helm/kube-prometheus/values.yaml#L298)
200
additionalLabels: {}
201
relabelings: []
202
# - sourceLabels: [__meta_kubernetes_pod_node_name]
203
# separator: ;
204
# regex: ^(.*)$
205
# targetLabel: nodename
206
# replacement: $1
207
# action: replace
208

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.