spec icon indicating copy to clipboard operation
spec copied to clipboard

add `secrets` field support for ControllerGetVolume Request

Open humblec opened this issue 3 years ago • 4 comments

At present secrets are not part of this request and some consumers need this field for its operation.: That said, storage backends like Ceph Cluster require the access to be achieved with the help of authentication. For such systems this becomes a requirement to have secrets/credentials be part of the request CO make for its further operations or fetching the state from the backend cluster.

Additional note for reviewer: Similar request was raised for NodeGetVolumeStats() here # https://github.com/container-storage-interface/spec/issues/371 which was not reached into consensus. One concern raised in similar request (#371) is the explosion of secrets field in the spec for various RPC calls. In turn this secret field requirement becoming a request for pretty much all the RPC calls.

Signed-off-by: Humble Chirammal [email protected] Signed-off-by: Prasanna Kumar Kalever [email protected]

humblec avatar Jun 16 '22 09:06 humblec

Do we also need a corresponding field in the PV?

xing-yang avatar Sep 21 '22 11:09 xing-yang

Do we also need a corresponding field in the PV?

@xing-yang I was planning to have the PV/CO side ( implementation) details listed in Kube issue as the field and implementation require some thoughts as discussed in https://github.com/container-storage-interface/spec/issues/371. Considering CSI spec support can be independent to the implementation of CO, thought of pulling this first.

humblec avatar Sep 21 '22 12:09 humblec

Cc @jdef

humblec avatar Sep 22 '22 15:09 humblec