Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding known issue for authorization for previous releases #1052

Merged
merged 7 commits into from
Apr 3, 2024
8 changes: 3 additions & 5 deletions content/docs/authorization/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,6 @@ Description: >






### New Features/Changes

- [#926 - [FEATURE]: Fixing the linting, formatting and vetting issues](https://github.com/dell/csm/issues/926)
Expand All @@ -26,5 +23,6 @@ Description: >


### Known Issues

There are no known issues in this release.
| Issue | Workaround |
|-------|------------|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
2 changes: 2 additions & 0 deletions content/docs/csidriver/release/powerflex.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,7 @@ description: Release notes for PowerFlex CSI driver
- [#1140 - [BUG]: Cert-csi tests are not reporting the passed testcases in K8S E2E tests ](https://github.com/dell/csm/issues/1140)
- [#1163 - [BUG]: Resource quota bypass](https://github.com/dell/csm/issues/1163)
- [#1174 - [BUG]: Kubelet Configuration Directory setting should not have a comment about default value being None](https://github.com/dell/csm/issues/1174)
- [#1210 - [BUG]: Helm deployment of PowerFlex driver is failing](https://github.com/dell/csm/issues/1210)

### Known Issues

Expand All @@ -38,6 +39,7 @@ A CSI ephemeral pod may not get created in OpenShift 4.13 and fail with the erro
| The PowerFlex Dockerfile is incorrectly labeling the version as 2.7.0 for the 2.8.0 version. | Describe the driver pod using ```kubectl describe pod $podname -n vxflexos``` to ensure v2.8.0 is installed. |
| Resource quotas may not work properly with the CSI PowerFlex driver. PowerFlex is only able to assign storage in 8Gi chunks, so if a create volume call is made with a size not divisible by 8Gi, CSI-PowerFlex will round up to the next 8Gi boundary when it provisions storage -- however, the resource quota will not record this size but rather the original size in the create request. This means that, for example, if a 10Gi resource quota is set, and a user provisions 10 1Gi PVCs, 80Gi of storage will actually be allocated, which is well over the amount specified in the resource quota. | For now, users should only provision volumes in 8Gi-divisible chunks if they want to use resource quotas. |


### Note:

- Support for Kubernetes alpha features like Volume Health Monitoring and RWOP (ReadWriteOncePod) access mode will not be available in Openshift environment as Openshift doesn't support enabling of alpha features for Production Grade clusters.
Original file line number Diff line number Diff line change
Expand Up @@ -60,9 +60,6 @@ kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/relea
kubectl create -f samples/authorization/karavi-storage-secret.yaml
```

>__Note__:
> - If you are installing CSM Authorization in a different namespace than `authorization`, edit the `namespace` field in this file to your namespace.

### Install CSM Authorization Proxy Server

1. Follow all the [prerequisites](#prerequisite).
Expand All @@ -85,7 +82,6 @@ kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/relea

>__Note__:
> - If you specify `REDIS_STORAGE_CLASS`, the storage class must NOT be provisioned by the Dell CSI Driver to be configured with this installation of CSM Authorization.
> - If you are installing CSM Authorization in a different namespace than `authorization`, edit the `namespace` fields in this file to your namespace.

**Optional:**
To enable reporting of trace data with [Zipkin](https://zipkin.io/), use the `csm-config-params` configMap in the sample CR or dynamically by editing the configMap.
Expand Down Expand Up @@ -123,14 +119,11 @@ To enable reporting of trace data with [Zipkin](https://zipkin.io/), use the `cs
kubectl create -f <CERTIFICATE FILE>
```

>__Note__:
> - If you are installing CSM Authorization in a different namespace than `authorization`, edit the `namespace` field in this file to your namespace.

### Verify Installation of the CSM Authorization Proxy Server
Once the Authorization CR is created, you can verify the installation as mentioned below:

```bash
kubectl describe csm/<name-of-custom-resource> -n authorization
kubectl describe csm/<name-of-custom-resource> -n <namespace>
```

### Install Karavictl
Expand Down
1 change: 1 addition & 0 deletions content/docs/deployment/csmoperator/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,3 +31,4 @@ Description: >
| Issue | Workaround |
|-------|------------|
| When CSM Operator creates a deployment that includes secrets (e.g., application-mobility, observability, cert-manager, velero), these secrets are not deleted on uninstall and will be left behind. For example, the `karavi-topology-tls`, `otel-collector-tls`, and `cert-manager-webhook-ca` secrets will not be deleted. | This should not cause any issues on the system, but all secrets present on the cluster can be found with `kubectl get secrets -A`, and any unwanted secrets can be deleted with `kubectl delete secret -n <secret-namespace> <secret-name>`|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
2 changes: 1 addition & 1 deletion content/docs/prerequisites/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ weight: 1
{{<table "table table-striped table-bordered table-sm">}}
| Platform | Version | OS Dependencies |
|---------------|:----------------:|:------------------------:|
| PowerMax | PowerMax 2500/8500 PowerMaxOS 10 (6079)<br>PowerMaxOS 10.0.1 (6079)<br>PowerMaxOS 10.1 (6079)<br>PowerMax 2000/8000 - 5978.711.xxx<br>5978.479.xxx<br>Unisphere 10.0,10.0.1,10.1 | iscsi-initiator-utils<br>multipathd or powerpath<br>nvme-cli<br>nfs-utils |
| PowerMax | PowerMax 2500/8500 PowerMaxOS 10 (6079)<br>PowerMaxOS 10.0.1 (6079)<br>PowerMaxOS 10.1 (6079)<br>PowerMax 2000/8000 - 5978.711.711, 5978.714.714<br>5978.479.479<br>Unisphere 10.0,10.0.1,10.1 | iscsi-initiator-utils<br>multipathd or powerpath<br>nvme-cli<br>nfs-utils |
| PowerFlex | 3.6.x, 4.0.x, 4.5.x | [SDC](https://www.dell.com/support/home/en-us/product-support/product/scaleio/drivers)|
| Unity XT | 5.1.x, 5.2.x, 5.3.0 | iscsi-initiator-utils<br>multipathd<br>nfs-utils |
| PowerScale | OneFS 9.3, 9.4, 9.5.0.x (x >= 5) | nfs-utils |
Expand Down
5 changes: 3 additions & 2 deletions content/v1/authorization/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,5 +27,6 @@ Description: >


### Known Issues

There are no known issues in this release.
| Issue | Workaround |
|-------|------------|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
1 change: 1 addition & 0 deletions content/v1/deployment/csmoperator/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,7 @@ Description: >
|-------|------------|
| The status field of a csm object as deployed by CSM Operator may, in limited cases, display an incorrect status for a deployment. | As a workaround, the health of the deployment can be determined by checking the health of the pods. |
| When CSM Operator creates a deployment that includes secrets (e.g., application-mobility, observability, cert-manager, velero), these secrets are not deleted on uninstall and will be left behind. For example, the `karavi-topology-tls`, `otel-collector-tls`, and `cert-manager-webhook-ca` secrets will not be deleted. | This should not cause any issues on the system, but all secrets present on the cluster can be found with `kubectl get secrets -A`, and any unwanted secrets can be deleted with `kubectl delete secret -n <secret-namespace> <secret-name>`|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
| The images of sideCars are currently missing in the sample YAMLs in the offline bundle. As a consequence, the csm-operator is pulling them from registry.k8s.io. | We recommend manually updating the images of sideCars in the sample YAML file, for example, `storage_csm_powerflex_v291.yaml`, before proceeding with the driver installation. Here is an example snippet for the sideCars section in the YAML file:

```yaml
Expand Down
5 changes: 3 additions & 2 deletions content/v2/authorization/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,5 +20,6 @@ Description: >
- [#916 - [BUG]: Remove references to deprecated io/ioutil package](https://github.com/dell/csm/issues/916)

### Known Issues

There are no known issues in this release.
| Issue | Workaround |
|-------|------------|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
4 changes: 3 additions & 1 deletion content/v2/deployment/csmoperator/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,4 +24,6 @@ Description: >
- [#898 - [BUG]: Unable to pull podmon image from local repository for offline install](https://github.com/dell/csm/issues/898)

### Known Issues
There are no known issues in this release.
| Issue | Workaround |
|-------|------------|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
4 changes: 4 additions & 0 deletions content/v3/authorization/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,7 @@ Description: >
- Authorization RPM installation should use nogpgcheck for k3s-selinux package. ([#772](https://github.com/dell/csm/issues/772))
- CSM Authorization - karavictl generate token should output valid yaml. ([#767](https://github.com/dell/csm/issues/767))

### Known Issues
| Issue | Workaround |
|-------|------------|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
4 changes: 3 additions & 1 deletion content/v3/deployment/csmoperator/release/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,4 +27,6 @@ CSM 1.7.1 is applicable to helm based installations of PowerFlex driver.


### Known Issues
There are no known issues in this release.
| Issue | Workaround |
|-------|------------|
| CSM Operator does not support dynamic namespaces for Authorization. Despite successful installation in a namespace other than "authorization", errors may arise during volume creation. | Use the default namespace "authorization" for installing Authorization using CSM Operator|
Loading