Add experimental s3ql mounter

deploy/kubernetes/csi-s3-driver.yaml

@@ -75,7 +75,7 @@ spec:
             capabilities:
               add: ["SYS_ADMIN"]
             allowPrivilegeEscalation: true
-          image: ctrox/csi-s3-driver:0.1.0
+          image: ctrox/csi-s3-driver:0.2.0
           args:
             - "--endpoint=$(CSI_ENDPOINT)"
             - "--nodeid=$(NODE_ID)"
@@ -83,6 +83,7 @@ spec:
             - "--secret-access-key=$(SECRET_ACCESS_KEY)"
             - "--s3-endpoint=$(S3_ENDPOINT)"
             - "--region=$(REGION)"
+            - "--encryption-key=$(ENCRYPTION_KEY)"
             - "--v=4"
           env:
             - name: CSI_ENDPOINT
@@ -111,6 +112,11 @@ spec:
                 secretKeyRef:
                   name: csi-s3-secret
                   key: region
+            - name: ENCRYPTION_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: csi-s3-secret
+                  key: encryptionKey
           imagePullPolicy: "Always"
           volumeMounts:
             - name: plugin-dir

deploy/kubernetes/provisioner.yaml

@@ -79,7 +79,7 @@ spec:
             - name: socket-dir
               mountPath: /var/lib/kubelet/plugins/ch.ctrox.csi.s3-driver
         - name: s3-csi-driver
-          image: ctrox/csi-s3-driver:0.1.0
+          image: ctrox/csi-s3-driver:0.2.0
           args:
             - "--endpoint=$(CSI_ENDPOINT)"
             - "--nodeid=$(NODE_ID)"
@@ -87,6 +87,7 @@ spec:
             - "--secret-access-key=$(SECRET_ACCESS_KEY)"
             - "--s3-endpoint=$(S3_ENDPOINT)"
             - "--region=$(REGION)"
+            - "--encryption-key=$(ENCRYPTION_KEY)"
             - "--v=4"
           env:
             - name: CSI_ENDPOINT
@@ -115,6 +116,11 @@ spec:
                 secretKeyRef:
                   name: csi-s3-secret
                   key: region
+            - name: ENCRYPTION_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: csi-s3-secret
+                  key: encryptionKey
           imagePullPolicy: "Always"
           volumeMounts:
             - name: socket-dir

deploy/kubernetes/pvc.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default
 spec:
   accessModes:
-  - ReadWriteMany
+  - ReadWriteOnce
   resources:
     requests:
       storage: 5Gi

deploy/kubernetes/secret.yaml

@@ -8,3 +8,5 @@ stringData:
   endpoint: <S3_ENDPOINT_URL>
   # If not on S3, just set it to ""
   region: <S3_REGION>
+  # Currently only for s3ql
+  # encryptionKey: <FS encryption key>

deploy/kubernetes/storageclass.yaml

@@ -6,6 +6,6 @@ metadata:
 provisioner: ch.ctrox.csi.s3-driver
 parameters:
   # specify which mounter to use
-  # can be set to s3fs or goofys
+  # can be set to s3fs, goofys or s3ql
   # s3fs is the default
-  # mounter: s3fs
+  # mounter: s3ql