Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
45 commits
Select commit Hold shift + click to select a range
6b1a268
doc: use latest version for master branch
andyzhangx May 12, 2025
56bc37e
Merge pull request #953 from andyzhangx/cut-v1.18.0
andyzhangx May 12, 2025
42214ab
chore: upgrade sidecar image versions
andyzhangx Jun 3, 2025
d6455ae
test: fix CVE-2025-4673 in trivy action
andyzhangx Jun 14, 2025
9c23335
Merge pull request #959 from andyzhangx/CVE-2025-4673
andyzhangx Jun 14, 2025
8bfe548
chore(deps): bump build-image/debian-base in /cmd/smbplugin
dependabot[bot] Jun 17, 2025
b1365be
Merge pull request #960 from kubernetes-csi/dependabot/docker/cmd/smb…
andyzhangx Jun 18, 2025
17485a5
Merge pull request #957 from andyzhangx/upgrade-side-car
andyzhangx Jun 18, 2025
231f2e5
chore: upgrade csi-resizer to v1.14.0
andyzhangx Jul 4, 2025
a206593
Merge pull request #962 from andyzhangx/upgrade-resizer-1.14.0
andyzhangx Jul 4, 2025
2fafbb8
fix: CVE-2025-22868
andyzhangx Jul 21, 2025
032db30
Merge pull request #964 from andyzhangx/CVE-2025-22868
andyzhangx Jul 21, 2025
0cbf17f
fix: enable to use secrets with special characters
mpatlasov Jun 25, 2025
21309ed
test: fix CVE-2025-47907 trivy test failure
andyzhangx Aug 8, 2025
5b1ac85
Merge pull request #965 from andyzhangx/fix-CVE-2025-47907-failure
andyzhangx Aug 8, 2025
5d48318
fix: move defer up and add unit-tests for mount with "credentials=" o…
mpatlasov Aug 12, 2025
86b088e
Merge pull request #961 from mpatlasov/Use-credentials-mount-option
k8s-ci-robot Aug 12, 2025
a905ae8
chore(deps): bump actions/checkout from 4 to 5
dependabot[bot] Aug 12, 2025
324f3d9
Merge pull request #966 from kubernetes-csi/dependabot/github_actions…
k8s-ci-robot Aug 12, 2025
f4178a3
chore(deps): bump actions/setup-go from 5 to 6
dependabot[bot] Sep 5, 2025
6ddb2b5
test: fix helm install
andyzhangx Sep 5, 2025
808dea5
fix: CVE-2025-5187
andyzhangx Sep 5, 2025
c14f85c
chore: upgrade k8s li
andyzhangx Sep 5, 2025
86d144e
test: fix test suites
andyzhangx Sep 5, 2025
3961756
cleanup: fix verifcation failure
andyzhangx Sep 5, 2025
6e88408
Merge pull request #972 from andyzhangx/fix-helm-install
andyzhangx Sep 5, 2025
fdf4865
Merge pull request #971 from kubernetes-csi/dependabot/github_actions…
andyzhangx Sep 5, 2025
79b96d0
chore(deps): bump build-image/debian-base in /cmd/smbplugin
dependabot[bot] Sep 17, 2025
365c056
Merge pull request #973 from kubernetes-csi/dependabot/docker/cmd/smb…
k8s-ci-robot Sep 19, 2025
7b91ded
chore: upgrade csi sidecar image versions
andyzhangx Sep 22, 2025
bd90e49
Merge pull request #975 from andyzhangx/csi-sidecar-upgrade
andyzhangx Sep 24, 2025
fd65297
doc: Update README with Helm chart versioning info
andyzhangx Oct 2, 2025
254850a
chore(deps): bump github/codeql-action from 3 to 4
dependabot[bot] Oct 8, 2025
a1c4386
Merge pull request #979 from kubernetes-csi/dependabot/github_actions…
k8s-ci-robot Oct 8, 2025
a566175
feat: support multiple storage classes creation using helm chart
andyzhangx Oct 8, 2025
f7623b9
Merge pull request #980 from andyzhangx/support-multi-sc
andyzhangx Oct 8, 2025
0608843
doc: cut v1.19.0 release
andyzhangx Oct 8, 2025
be8031d
Squashed 'release-tools/' changes from 701dc34bc..533443055
andyzhangx Oct 10, 2025
46399ea
Merge commit 'be8031d7c2a0c1c25eb5e20e4c97572be299c45f' into update-c…
andyzhangx Oct 10, 2025
985db01
Merge pull request #983 from kubernetes-csi/update-csi-release-tools2…
andyzhangx Oct 11, 2025
fef8df7
doc: cut v1.19.1 release
andyzhangx Oct 11, 2025
54c0ce7
test: disable helm index file check
andyzhangx Oct 11, 2025
3186081
Merge pull request #984 from andyzhangx/cut-v1.19.1
andyzhangx Oct 13, 2025
56e457d
Merge remote-tracking branch 'openshift/master' into rebase-v1.19.1
dfajmon Nov 5, 2025
75e6053
UPSTREAM: <carry>: Add OpenShift files
dfajmon Jul 23, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
2 changes: 1 addition & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ include release-tools/build.make
GIT_COMMIT := $(shell git rev-parse HEAD)
REGISTRY ?= andyzhangx
REGISTRY_NAME := $(shell echo $(REGISTRY) | sed "s/.azurecr.io//g")
IMAGE_VERSION ?= v1.18.0
IMAGE_VERSION ?= v1.19.1
VERSION ?= latest
# Use a custom version for E2E tests if we are testing in CI
ifdef CI
Expand Down
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,9 +13,9 @@ This driver allows Kubernetes to access [SMB](https://wiki.wireshark.org/SMB) se
|Driver Version | supported k8s version | supported [Windows csi-proxy](https://github.com/kubernetes-csi/csi-proxy) version |
|---------------|-----------------------|-------------------------------------|
|master branch | 1.21+ | v0.2.2+ |
|v1.19.1 | 1.21+ | v0.2.2+ |
|v1.18.0 | 1.21+ | v0.2.2+ |
|v1.17.0 | 1.21+ | v0.2.2+ |
|v1.16.0 | 1.21+ | v0.2.2+ |

### Driver parameters
Please refer to `smb.csi.k8s.io` [driver parameters](./docs/driver-parameters.md)
Expand Down
64 changes: 60 additions & 4 deletions charts/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,10 +11,12 @@
- `--set linux.kubelet="/var/snap/microk8s/common/var/lib/kubelet"` - sets correct path to microk8s kubelet even though a user has a folder link to it.

### install a specific version
> [!IMPORTANT]
> Starting from version `1.18.0`, the prefix `v` is removed from hlem chart release so they are in line with [semver](https://semver.org). Therefore, when upgrading, refer to version `1.18.0` instead of `v1.18.0`.

```console
helm repo add csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
helm install csi-driver-smb csi-driver-smb/csi-driver-smb --namespace kube-system --version v1.18.0
helm install csi-driver-smb csi-driver-smb/csi-driver-smb --namespace kube-system --version v1.19.1
```

### install driver with customized driver name, deployment name
Expand Down Expand Up @@ -51,13 +53,13 @@ The following table lists the configurable parameters of the latest SMB CSI Driv
| `image.smb.repository` | csi-driver-smb docker image | `gcr.io/k8s-staging-sig-storage/smbplugin` |
| `image.smb.tag` | csi-driver-smb docker image tag | `canary` |
| `image.smb.pullPolicy` | csi-driver-smb image pull policy | `IfNotPresent` |
| `image.csiProvisioner.tag` | csi-provisioner docker image tag | `v5.2.0` |
| `image.csiProvisioner.tag` | csi-provisioner docker image tag | `v5.3.0` |
| `image.csiProvisioner.pullPolicy` | csi-provisioner image pull policy | `IfNotPresent` |
| `image.livenessProbe.repository` | liveness-probe docker image | `/livenessprobe` |
| `image.livenessProbe.tag` | liveness-probe docker image tag | `v2.15.0` |
| `image.livenessProbe.tag` | liveness-probe docker image tag | `v2.17.0` |
| `image.livenessProbe.pullPolicy` | liveness-probe image pull policy | `IfNotPresent` |
| `image.nodeDriverRegistrar.repository` | csi-node-driver-registrar docker image | `/csi-node-driver-registrar` |
| `image.nodeDriverRegistrar.tag` | csi-node-driver-registrar docker image tag | `v2.13.0` |
| `image.nodeDriverRegistrar.tag` | csi-node-driver-registrar docker image tag | `v2.15.0` |
| `image.nodeDriverRegistrar.pullPolicy` | csi-node-driver-registrar image pull policy | `IfNotPresent` |
| `imagePullSecrets` | Specify docker-registry secret names as an array | `[]` (does not add image pull secrets to deployed pods) |
| `serviceAccount.create` | whether create service account of csi-smb-controller | `true` |
Expand Down Expand Up @@ -125,6 +127,7 @@ The following table lists the configurable parameters of the latest SMB CSI Driv
| `windows.resources.smb.requests.cpu` | smb-csi-driver cpu requests limits | `10m` |
| `windows.resources.smb.requests.memory` | smb-csi-driver memory requests limits | `20Mi` |
| `windows.kubelet` | configure kubelet directory path on Windows agent node | `'C:\var\lib\kubelet'` |
| `storageClasses` | create multiple storage classes | `[]` | |

### Csi Proxy support on windows
> if you have set `windows.useHostProcessContainers` as `true`, csi-proxy is not needed by CSI driver.
Expand All @@ -145,6 +148,59 @@ The following table lists the configurable parameters of the latest CSI-proxy Dr
| `image.csiproxy.tag` | csiproxy docker image tag | `v1.1.2` |
| `image.csiproxy.pullPolicy` | csiproxy image pull policy | `IfNotPresent` |

## Create multiple storage classes

- create multiple storage classes with different configurations using the `storageClasses` parameter:

```yaml
storageClasses:
- name: smb-csi
annotations:
storageclass.kubernetes.io/is-default-class: "true"
parameters:
source: "//smb-server.default.svc.cluster.local/share"
# if csi.storage.k8s.io/provisioner-secret is provided, will create a sub directory
# with PV name under source
csi.storage.k8s.io/provisioner-secret-name: smbcreds
csi.storage.k8s.io/provisioner-secret-namespace: default
csi.storage.k8s.io/node-stage-secret-name: smbcreds
csi.storage.k8s.io/node-stage-secret-namespace: default
reclaimPolicy: Delete
volumeBindingMode: Immediate
allowVolumeExpansion: true
mountOptions:
- dir_mode=0777
- file_mode=0777
- noperm
- mfsymlinks
- cache=strict
- noserverino # required to prevent data corruption
- name: smb-csi-retain
parameters:
source: "//smb-server.default.svc.cluster.local/share"
# if csi.storage.k8s.io/provisioner-secret is provided, will create a sub directory
# with PV name under source
csi.storage.k8s.io/provisioner-secret-name: smbcreds
csi.storage.k8s.io/provisioner-secret-namespace: default
csi.storage.k8s.io/node-stage-secret-name: smbcreds
csi.storage.k8s.io/node-stage-secret-namespace: default
reclaimPolicy: Retain
volumeBindingMode: Immediate
allowVolumeExpansion: true
mountOptions:
- dir_mode=0777
- file_mode=0777
- noperm
- mfsymlinks
- cache=strict
- noserverino # required to prevent data corruption
```

- install with custom values:
```console
helm install csi-driver-smb csi-driver-smb/csi-driver-smb --namespace kube-system -f custom-values.yaml
```

## troubleshooting

- Add `--wait -v=5 --debug` in `helm install` command to get detailed error
Expand Down
Loading