action: publish-image

Signed-off-by: Praveen M <[email protected]>

Author: iPraveenParihar

.github/workflows/publish-image.yaml

@@ -0,0 +1,44 @@
+name: Build and Push Image
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch_name:
+        description: "The branch name to checkout and build"
+        required: false
+        default: "devel"
+      base_image:
+        description: "BASE_IMAGE to use for the image"
+        required: false
+        default: "quay.io/ceph/ceph:v19"
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+    # Checkout repository code
+    - name: Checkout code
+      uses: actions/checkout@v3
+      with:
+        ref: ${{ github.event.inputs.branch_name }} # Use the input branch name
+
+    # Log in to GitHub Container Registry
+    - name: Log in to GitHub Container Registry
+      env:
+        GHCR: ${{ secrets.GHCR }}
+      run: echo "${GHCR}" | podman login ghcr.io -u ${{ github.actor }} --password-stdin
+
+    # Build the image and push
+    - name: Build Image and Push
+      run: |
+        # Extract branch name and replace '/' with '-'
+        IMAGE_TAG=$(echo "${{ github.event.inputs.branch_name }}" | sed 's|/|-|g')
+        IMAGE_NAME=$(echo "ghcr.io/${{ github.repository_owner }}/cephcsi" | tr '[:upper:]' '[:lower:]')
+        BASE_IMAGE="${{ github.event.inputs.base_image }}"
+
+        echo "Building image: ${IMAGE_NAME}:${IMAGE_TAG}"
+        make -j4 image-cephcsi CSI_IMAGE_NAME=${IMAGE_NAME} CSI_IMAGE_VERSION=${IMAGE_TAG} BASE_IMAGE=${BASE_IMAGE}
+
+        echo "Pushing image: ${IMAGE_NAME}:${IMAGE_TAG}"
+        podman push ${IMAGE_NAME}:${IMAGE_TAG}

examples/rbd/raw-block-pod.yaml

@@ -4,10 +4,19 @@ kind: Pod
 metadata:
   name: pod-with-raw-block-volume
 spec:
+  securityContext:
+    runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
   containers:
     - name: centos
       image: quay.io/centos/centos:latest
       command: ["/bin/sleep", "infinity"]
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
       volumeDevices:
         - name: data
           devicePath: /dev/xvda

examples/rbd/raw-block-pvc-rwop.yaml

@@ -10,4 +10,4 @@ spec:
   resources:
     requests:
       storage: 1Gi
-  storageClassName: csi-rbd-sc
+  storageClassName: ocs-external-storagecluster-ceph-rbd

examples/rbd/raw-block-pvc.yaml

@@ -10,4 +10,4 @@ spec:
   resources:
     requests:
       storage: 1Gi
-  storageClassName: csi-rbd-sc
+  storageClassName: ocs-external-storagecluster-ceph-rbd

examples/rbd/rh-ext-ceph-cluster

@@ -0,0 +1,49 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----

examples/rbd/rh-ext-ceph-cluster.pub

@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtwWtkrIi0ZIEIUmFzJ4NM0HLJM30rUomsRwpDHJaDtT++qOGPpxgbG1Y6NWCP6p4HGaiQrU1j4WzQnPEsBIr/b8KWfoVCcSl7+XIDPWLIlJHs9DvacJElNP9sQuQ9bu6U9JJ3bi8/tPkpw2+jjIDaWcjRKONUxrpc+BTmWV8t6wtD4Dab9YCN+UY5aiyhfw4xEpN4SP1nmM4kGAl1rbk9ebJMOgHUXXv5zvgv4F+tW8nAzyCPuz9AdbyerbG/x2R12EtT0Y4N4BtvoO33Q7d3kDmhQ1a5cHeFKv3mIhy1bIoBeVypJbFe+WEAk+2Dppw3NXcquoSzpWvpkWbZACbPPZmsCNmdPlZFH11B9Jx8eyE5N7ZzyXY3KUcWaRNWMePFbhdlb0YTq5/nQhaMSeVzCHhnJ6E5sobmVk3gMBYtkUnhXbBTol17118c+O1AtIixArg6iKdGpBOroIslOMIx+PmKDkM6HA70OTsk2uALowjU1mq66MPaAM+sfx+23S9CTeBJh0qnDDPvqmiJx1gDFBVMp1xK1ITCsDgauYX1V8lBvt72C0bT0hLH8lZ6i4gs4raEPjImAfjeB7luJNzQbh3X1yrepG2C7wKay/lee3lLsaJV4EvTmdj3KJpxPkzTAkVA+ywXC8mYKALHZQKKx4GlVVqNnfMoCQd7AKtxQQ== [email protected]

internal/rbd/rbd_util.go

@@ -152,6 +152,7 @@ type rbdImage struct {
 
 // check that rbdVolume implements the types.Volume interface.
 var _ types.Volume = &rbdVolume{}
+var _ types.Snapshot = &rbdSnapshot{}
 
 // rbdVolume represents a CSI volume and its RBD image specifics.
 type rbdVolume struct {