2 baseRepo: mcr.microsoft.com
4 repository: chainreg.biz/chainguard-private/azurefile-csi
6 pullPolicy: IfNotPresent
8 repository: chainreg.biz/chainguard-private/kubernetes-csi-external-provisioner
9 tag: latest@sha256:d6f10619f09f5443d9a5afe57cdee026e254bee095f891e9d4de2e0fef5fc24b
10 pullPolicy: IfNotPresent
12 repository: chainreg.biz/chainguard-private/kubernetes-csi-external-resizer
13 tag: latest@sha256:452b507a78b2abfb5caa5af2b2c6539b6623b34adf39b610665dbb962a7dd3b8
14 pullPolicy: IfNotPresent
16 repository: chainreg.biz/chainguard-private/kubernetes-csi-livenessprobe
17 tag: latest@sha256:6b2e0a464d2b64df1fdf3a0db8299d160989c30074e4b768a9b490936d5754d4
18 pullPolicy: IfNotPresent
20 repository: chainreg.biz/chainguard-private/kubernetes-csi-node-driver-registrar
21 tag: latest@sha256:76749f2e7e9690f49c44acc6ebf9864b9ccaa8a56cce0a59e9b77e4ebb31e754
22 pullPolicy: IfNotPresent
23## Reference to one or more secrets to be used when pulling images
24## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
26# - name: myRegistryKeySecretName
28# -- Custom labels to add into metadata
30# k8s-app: azurefile-csi-driver
33 create: true # When true, service accounts will be created for you. Set to false if you want to use your own.
34 controller: csi-azurefile-controller-sa # Name of Service Account to be created or used
35 node: csi-azurefile-node-sa # Name of Service Account to be created or used
36 snapshotController: csi-snapshot-controller-sa # Name of Service Account to be created or used
41 name: csi-azurefile-controller
42 cloudConfigSecretName: azure-cloud-provider
43 cloudConfigSecretNamespace: kube-system
44 allowEmptyCloudConfig: true
46 strategyType: RollingUpdate
47 hostNetwork: true # this setting could be disabled if controller does not depend on MSI setting
52 runOnControlPlane: false
106 - key: "node-role.kubernetes.io/master"
109 - key: "node-role.kubernetes.io/controlplane"
112 - key: "node-role.kubernetes.io/control-plane"
115 - key: "CriticalAddonsOnly"
119 strategyType: RollingUpdate
121 cloudConfigSecretName: azure-cloud-provider
122 cloudConfigSecretNamespace: kube-system
123 allowEmptyCloudConfig: true
124 allowInlineVolumeKeyAccessWithIdentity: false
125 enableKataCCMount: false
126 enableManagedIdentityAuth: true
133 initialDelaySeconds: 20
140 installAznfsMount: true
141 migrateK8sRepo: false
146 repository: chainreg.biz/chainguard-private/kubernetes-csi-external-snapshotter
148 pullPolicy: IfNotPresent
149 csiSnapshotController:
150 repository: chainreg.biz/chainguard-private/kubernetes-csi-external-snapshot-controller
151 tag: latest@sha256:d752080ccb7cd22a71b042281675e0bc5e5ea98e0c4ceb09aee959b7658a0ed3
152 pullPolicy: IfNotPresent
154 name: csi-snapshot-controller
156 strategyType: RollingUpdate
169 enableGetVolumeStats: true
170 enableVolumeMountGroup: true
171 fsGroupPolicy: ReadWriteOnceWithFSType
173 name: file.csi.azure.com
175 userAgentSuffix: "OSS-helm"
176 azureGoSDKLogLevel: "" # available values: ""(no logs), DEBUG, INFO, WARNING, ERROR
181 dsName: csi-azurefile-node # daemonset name
182 dnsPolicy: Default # available values: Default, ClusterFirst, ClusterFirstWithHostNet, None
183 kubelet: /var/lib/kubelet
185 distro: debian # available values: debian, fedora
186 mountPermissions: 0777
215 requiredDuringSchedulingIgnoredDuringExecution:
224 useHostProcessContainers: true
225 dsName: csi-azurefile-node-win # daemonset name
226 kubelet: 'C:\var\lib\kubelet'
228 enableRegistrationProbe: true
253 - key: "node.kubernetes.io/os"
259 requiredDuringSchedulingIgnoredDuringExecution:
268 # [optional] If the AAD application or user-assigned managed identity is not in the same tenant as the cluster
269 # then set tenantID with the application or user-assigned managed identity tenant ID
271azureCredentialFileConfigMap: azure-cred-file