Skip to content

Commit

Permalink
update changelog with Unity XT known issue (#978)
Browse files Browse the repository at this point in the history
* update changelog with Unity XT known issue

* update changelog

* review comment incorporation
  • Loading branch information
panigs7 authored Sep 8, 2023
1 parent 4e318e0 commit 38f9ab6
Showing 1 changed file with 10 additions and 3 deletions.
13 changes: 10 additions & 3 deletions CHANGELOG/CHANGELOG-1.8.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,9 @@
- [v1.8.0](#v180)
- [Changelog since v1.7.1](#changelog-since-v171)
- [Known Issues](#known-issues)
- [CSI PowerStore: Not able to create ephemeral pods in OpenShift 4.13](#csi-powerstore-not-able-to-create-ephemeral-pods-in-openshift-413)
- [CSI PowerFlex, CSI PowerStore, CSI Unity XT: Not able to create ephemeral pods in OpenShift 4.13](#csi-powerflex-csi-powerstore-csi-unity-xt-not-able-to-create-ephemeral-pods-in-openshift-413)
- [CSI PowerStore: In OpenShift 4.13, root user is not allowed to perform write operations on NFS shares when root squashing is enabled](#csi-powerstore-in-openshift-413-root-user-is-not-allowed-to-perform-write-operations-on-nfs-shares-when-root-squashing-is-enabled)
- [CSI Drivers: Volume limit for pending PVCs is not obeyed if the volume limit is exhausted and the CSI Driver restarts](#csi-drivers-volume-limit-for-pending-pvcs-is-not-obeyed-if-the-volume-limit-is-exhausted-and-the-csi-driver-restarts)
- [Changes by Kind](#changes-by-kind)
- [Deprecation](#deprecation)
- [Features](#features)
Expand All @@ -16,9 +17,9 @@

## Known Issues

### CSI PowerStore: Not able to create ephemeral pods in OpenShift 4.13
### CSI PowerFlex, CSI PowerStore, CSI Unity XT: Not able to create ephemeral pods in OpenShift 4.13

Ephemeral pod is not being created in OpenShift 4.13 and is failing with the error "error when creating pod: the pod uses an inline volume provided by CSIDriver csi-powerstore.dellemc.com, and the namespace has a pod security enforcement level that is lower than privileged."
Ephemeral pod is not being created in OpenShift 4.13 and is failing with the error "error when creating pod: the pod uses an inline volume provided by CSIDriver csi-powerstore.dellemc.com, and the namespace has a pod security enforcement level that is lower than privileged." This is seen in CSI PowerFlex, CSI PowerStore and CSI Unity XT drivers.

This issue occurs because OpenShift 4.13 introduced the CSI Volume Admission plugin to restrict the use of a CSI driver capable of provisioning CSI ephemeral volumes during pod admission (https://docs.openshift.com/container-platform/4.13/storage/container_storage_interface/ephemeral-storage-csi-inline.html). Therefore, an additional label "security.openshift.io/csi-ephemeral-volume-profile" needs to be added to the CSIDriver object to support inline ephemeral volumes.

Expand All @@ -28,6 +29,12 @@ In OpenShift 4.13, the root user is not allowed to perform write operations on N

The workaround for this issue is to disable root squashing by setting allowRoot: "true" in the NFS storage class.

### CSI Drivers: Volume limit for pending PVCs is not obeyed if the volume limit is exhausted and the CSI Driver restarts

If the volume limit is exhausted and there are pending pods and PVCs due to exceed max volume count, the pending PVCs will be bound to PVs and the pending pods will be scheduled to nodes when the driver pods are restarted. This is seen in CSI PowerFlex, CSI PowerMax, CSI PowerScale, CSI PowerStore and CSI Unity XT drivers.

It is advised not to have any pending pods or PVCs once the volume limit per node is exhausted on a CSI Driver. There is an open issue reported with kubenetes at https://github.com/kubernetes/kubernetes/issues/95911 with the same behavior.

## Changes by Kind

### Deprecation
Expand Down

0 comments on commit 38f9ab6

Please sign in to comment.