Merge pull request #430 from andyzhangx/fedora

fix: RedHat/CentOS issue in helm installation

Author: andyzhangx

README.md

@@ -40,8 +40,8 @@ Please refer to `blob.csi.azure.com` [driver parameters](./docs/driver-parameter
 This option does not depend on cloud provider config file, supports cross subscription and on-premise cluster scenario. Refer to [detailed steps](./deploy/example/e2e_usage.md#option2-bring-your-own-storage-account).
 
 ### Install driver on a Kubernetes cluster
- - install via [kubectl](./docs/install-blob-csi-driver.md) on public Azure (please use helm for other cloud environments, e.g. Azure Stack)
- - install via [helm charts](./charts) on public Azure and Azure Stack
+ - install via [kubectl](./docs/install-blob-csi-driver.md) on public Azure (please use helm for Azure Stack, RedHat/CentOS)
+ - install via [helm charts](./charts) on public Azure, Azure Stack, RedHat/CentOS
 
  - (Preview) install [blobfuse-proxy](./pkg/blobfuse-proxy) to make blobfuse mount still available after driver restart
 

charts/README.md

@@ -12,15 +12,20 @@ helm repo add blob-csi-driver https://raw.githubusercontent.com/kubernetes-sigs/
 helm install blob-csi-driver blob-csi-driver/blob-csi-driver --namespace kube-system
 ```
 
+### install a specific version
+```console
+helm repo add blob-csi-driver https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/master/charts
+helm install blob-csi-driver blob-csi-driver/blob-csi-driver --namespace kube-system --version v1.1.0
+```
+
 ## install on Azure Stack
 ```console
 helm install blob-csi-driver blob-csi-driver/blob-csi-driver --namespace kube-system --set cloud=AzureStackCloud
 ```
 
-### install a specific version
+### install on RedHat/CentOS
 ```console
-helm repo add blob-csi-driver https://raw.githubusercontent.com/kubernetes-sigs/blob-csi-driver/master/charts
-helm install blob-csi-driver blob-csi-driver/blob-csi-driver --namespace kube-system --version v1.1.0
+helm install blob-csi-driver blob-csi-driver/blob-csi-driver --namespace kube-system --set linux.distro=fedora
 ```
 
 ### search for all available chart versions
@@ -99,7 +104,8 @@ The following table lists the configurable parameters of the latest Azure Blob S
 | `node.affinity`                                       | node pod affinity                                     | {}                                                             |
 | `node.nodeSelector`                                   | node pod node selector                                | {}                                                             |
 | `node.tolerations`                                    | node pod tolerations                                  | []                                                             |
-| `kubelet.linuxPath`                                   | configure the kubelet path for Linux node             | `/var/lib/kubelet`                                             |
+| `linux.kubelet`                                       | configure kubelet directory path on Linux agent node node                  | `/var/lib/kubelet`                                                |
+| `linux.distro`                                        | configure ssl certificates for different Linux distribution(available values: `debian`, `fedora`)             | `debian`
 | `cloud`                                               | the cloud environment the driver is running on        | AzurePublicCloud                                               |
 | `podAnnotations`                                      | collection of annotations to add to all the pods      | {}                                                             |
 | `podLabels`                                           | collection of labels to add to all the pods           | {}                                                             |

charts/latest/blob-csi-driver-v1.2.0.tgz

@@ -127,6 +127,14 @@ spec:
               mountPath: /etc/ssl/certs
               readOnly: true
             {{- end }}
+            {{- if eq .Values.linux.distro "fedora" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: ssl-pki
+              mountPath: /etc/pki/ca-trust/extracted
+              readOnly: true
+            {{- end }}
           resources: {{- toYaml .Values.controller.resources.blob | nindent 12 }}
         - name: csi-resizer
           image: "{{ .Values.image.csiResizer.repository }}:{{ .Values.image.csiResizer.tag }}"
@@ -158,6 +166,14 @@ spec:
           hostPath:
             path: /etc/ssl/certs
         {{- end }}
+        {{- if eq .Values.linux.distro "fedora" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        - name: ssl-pki
+          hostPath:
+            path: /etc/pki/ca-trust/extracted
+        {{- end }}
       {{- if .Values.securityContext }}
       securityContext: {{- toYaml .Values.securityContext | nindent 8 }}
       {{- end }}

charts/latest/blob-csi-driver/templates/csi-blob-controller.yaml

@@ -77,7 +77,7 @@ spec:
             - name: ADDRESS
               value: /csi/csi.sock
             - name: DRIVER_REG_SOCK_PATH
-              value: {{ .Values.kubelet.linuxPath }}/plugins/blob.csi.azure.com/csi.sock
+              value: {{ .Values.linux.kubelet }}/plugins/blob.csi.azure.com/csi.sock
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
@@ -134,7 +134,7 @@ spec:
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
-            - mountPath: {{ .Values.kubelet.linuxPath }}/
+            - mountPath: {{ .Values.linux.kubelet }}/
               mountPropagation: Bidirectional
               name: mountpoint-dir
             - mountPath: /etc/kubernetes/
@@ -149,18 +149,26 @@ spec:
               mountPath: /etc/ssl/certs
               readOnly: true
             {{- end }}
+            {{- if eq .Values.linux.distro "fedora" }}
+            - name: ssl
+              mountPath: /etc/ssl/certs
+              readOnly: true
+            - name: ssl-pki
+              mountPath: /etc/pki/ca-trust/extracted
+              readOnly: true
+            {{- end }}
           resources: {{- toYaml .Values.node.resources.blob | nindent 12 }}
       volumes:
         - hostPath:
-            path: {{ .Values.kubelet.linuxPath }}/plugins/blob.csi.azure.com
+            path: {{ .Values.linux.kubelet }}/plugins/blob.csi.azure.com
             type: DirectoryOrCreate
           name: socket-dir
         - hostPath:
-            path: {{ .Values.kubelet.linuxPath }}/
+            path: {{ .Values.linux.kubelet }}/
             type: DirectoryOrCreate
           name: mountpoint-dir
         - hostPath:
-            path: {{ .Values.kubelet.linuxPath }}/plugins_registry/
+            path: {{ .Values.linux.kubelet }}/plugins_registry/
             type: DirectoryOrCreate
           name: registration-dir
         - hostPath:
@@ -178,6 +186,14 @@ spec:
           hostPath:
             path: /etc/ssl/certs
         {{- end }}
+        {{- if eq .Values.linux.distro "fedora" }}
+        - name: ssl
+          hostPath:
+            path: /etc/ssl/certs
+        - name: ssl-pki
+          hostPath:
+            path: /etc/pki/ca-trust/extracted
+        {{- end }}
       {{- if .Values.securityContext }}
       securityContext: {{- toYaml .Values.securityContext | nindent 8 }}
       {{- end }}

charts/latest/blob-csi-driver/templates/csi-blob-node.yaml

@@ -101,8 +101,10 @@ node:
   tolerations: []
   livenessProbe:
     healthPort: 29633
-kubelet:
-  linuxPath: /var/lib/kubelet
+
+linux:
+  kubelet: /var/lib/kubelet
+  distro: debian
 
 cloud: AzurePublicCloud