[{"_1":2,"_167":-5,"_168":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_144":145},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_137":-5,"_138":11,"_139":17,"_140":11,"_141":-5,"_142":143},"canonicalUrl","https://hub.docker.com/r/boky/csi-provisioner/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","boky","reponame","csi-provisioner","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2020-01-19T17:57:38.368051Z","description","Multi architecture (amd64/arm/arm64) build of https://github.com/kubernetes-csi/external-provisioner","is_private","last_updated","2020-01-19T17:57:40.196926Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.distribution.manifest.list.v2+json","name","pull_count",2755,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","[![Build Status](https://travis-ci.org/kubernetes-csi/external-provisioner.svg?branch=master)](https://travis-ci.org/kubernetes-csi/external-provisioner)\n\n# CSI provisioner\n\nThe external-provisioner is a sidecar container that dynamically provisions volumes by calling `ControllerCreateVolume` and `ControllerDeleteVolume` functions of CSI drivers. It is necessary because internal persistent volume controller running in Kubernetes controller-manager does not have any direct interfaces to CSI drivers.\n\n## Overview\nThe external-provisioner is an external controller that monitors `PersistentVolumeClaim` objects created by user and creates/deletes volumes for them. Full design can be found at Kubernetes proposal at [container-storage-interface.md](https://github.com/kubernetes/community/blob/master/contributors/design-proposals/storage/container-storage-interface.md)\n\n## Compatibility\n\nThis information reflects the head of this branch.\n\n| Compatible with CSI Version | Container Image | Recommended K8s Version |\n| ------------------------------------------------------------------------------------------ | -------------------------------| --------------- |\n| [CSI Spec v1.0.0](https://github.com/container-storage-interface/spec/releases/tag/v1.0.0) | quay.io/k8scsi/csi-provisioner | 1.17 |\n\n## Feature status\n\nVarious external-provisioner releases come with different alpha / beta features. Check `--help` output for alpha/beta features in each release.\n\nFollowing table reflects the head of this branch.\n\n| Feature | Status | Default | Description | Provisioner Feature Gate Required |\n| -------------- | ------- | ------- | --------------------------------------------------------------------------------------------- | --------------------------------- |\n| Topology | Beta | Off | [Topology aware dynamic provisioning](https://kubernetes-csi.github.io/docs/topology.html) (requires kubelet 1.14 on nodes). | Yes |\n| Cloning | Beta | On | [Cloning](https://kubernetes-csi.github.io/docs/volume-cloning.html). | No |\n| Snapshots | Beta | On | [Snapshots and Restore](https://kubernetes-csi.github.io/docs/snapshot-restore-feature.html). | No |\n| CSIMigration | Beta | On | [Migrating in-tree volume plugins to CSI](https://kubernetes.io/docs/concepts/storage/volumes/#csi-migration). | No |\n\nAll other external-provisioner features and the external-provisioner itself is considered GA and fully supported.\n\n## Usage\n\nIt is necessary to create a new service account and give it enough privileges to run the external-provisioner, see `deploy/kubernetes/rbac.yaml`. The provisioner is then deployed as single Deployment as illustrated below:\n\n```sh\nkubectl create deploy/kubernetes/deployment.yaml\n```\n\nThe external-provisioner may run in the same pod with other external CSI controllers such as the external-attacher, external-snapshotter and/or external-resizer.\n\nNote that the external-provisioner does not scale with more replicas. Only one external-provisioner is elected as leader and running. The others are waiting for the leader to die. They re-elect a new active leader in ~15 seconds after death of the old leader.\n\n### Command line options\n\n#### Recommended optional arguments\n* `--csi-address `: This is the path to the CSI driver socket inside the pod that the external-provisioner container will use to issue CSI operations (`/run/csi/socket` is used by default).\n\n* `--enable-leader-election`: Enables leader election. This is mandatory when there are multiple replicas of the same external-provisioner running for one CSI driver. Only one of them may be active (=leader). A new leader will be re-elected when current leader dies or becomes unresponsive for ~15 seconds.\n\n* `--leader-election-type`: The resource type to use for leader election, options are 'endpoints' (default) or 'leases' (recommended)\n\n* `--leader-election-namespace`: Namespace where leader election object will be created. It is recommended that this parameter is populated from Kubernetes DownwardAPI with the namespace where the external-provisioner runs in.\n\n* `--timeout `: Timeout of all calls to CSI driver. It should be set to value that accommodates majority of `ControllerCreateVolume` and `ControllerDeleteVolume` calls. See [CSI error and timeout handling](#csi-error-and-timeout-handling) for details. 15 seconds is used by default.\n\n* `--retry-interval-start `: Initial retry interval of failed provisioning or deletion. It doubles with each failure, up to `--retry-interval-max` and then it stops increasing. Default value is 1 second. See [CSI error and timeout handling](#csi-error-and-timeout-handling) for details.\n\n* `--retry-interval-max `: Maximum retry interval of failed provisioning or deletion. Default value is 5 minutes. See [CSI error and timeout handling](#csi-error-and-timeout-handling) for details.\n\n* `--worker-threads `: Number of simultaneously running `ControllerCreateVolume` and `ControllerDeleteVolume` operations. Default value is `100`.\n\n* `--metrics-address`: The TCP network address where the prometheus metrics endpoint will run (example: `:8080` which corresponds to port 8080 on local host). The default is empty string, which means metrics endpoint is disabled.\n\n* `--metrics-path`: The HTTP path where prometheus metrics will be exposed. Default is `/metrics`.\n\n#### Other recognized arguments\n* `--feature-gates `: A set of comma separated `=` pairs that describe feature gates for alpha/experimental features. See [list of features](#feature-status) or `--help` output for list of recognized features. Example: `--feature-gates Topology=true` to enable Topology feature that's disabled by default.\n\n* `--strict-topology`: This controls what topology information is passed to `CreateVolumeRequest.AccessibilityRequirements` in case of delayed binding. See [the table below](#topology-support) for an explanation how this option changes the result. This option has no effect if either `Topology` feature is disabled or `Immediate` volume binding mode is used.\n\n* `--kubeconfig `: Path to Kubernetes client configuration that the external-provisioner uses to connect to Kubernetes API server. When omitted, default token provided by Kubernetes will be used. This option is useful only when the external-provisioner does not run as a Kubernetes pod, e.g. for debugging. Either this or `--master` needs to be set if the external-provisioner is being run out of cluster.\n\n* `--master `: Master URL to build a client config from. When omitted, default token provided by Kubernetes will be used. This option is useful only when the external-provisioner does not run as a Kubernetes pod, e.g. for debugging. Either this or `--kubeconfig` needs to be set if the external-provisioner is being run out of cluster.\n\n* `--volume-name-prefix `: Prefix of PersistentVolume names created by the external-provisioner. Default value is \"pvc\", i.e. created PersistentVolume objects will have name `pvc-`.\n\n* `--volume-name-uuid-length`: Length of UUID to be added to `--volume-name-prefix`. Default behavior is to NOT truncate the UUID.\n\n* `--version`: Prints current external-provisioner version and quits.\n\n* All glog / klog arguments are supported, such as `-v ` or `-alsologtostderr`.\n\n#### Deprecated arguments\n* `--connection-timeout `: This option was used to limit establishing connection to CSI driver. Currently, the option does not have any effect and the external-provisioner tries to connect to CSI driver socket indefinitely. It is recommended to run ReadinessProbe on the driver to ensure that the driver comes up in reasonable time.\n\n* `--provisioner`: This option was used to set a provisioner name to look for in the StorageClass. Currently, the option does not have any effect and the external-provisioner uses the CSI driver name.\n\n* `--leader-election-type`: This option was used to choose which leader election resource type to use. Currently, the option defaults to `endpoints`, but will be removed in the future to only support `Lease` based leader election.\n\n### Topology support\nWhen `Topology` feature is enabled and the driver specifies `VOLUME_ACCESSIBILITY_CONSTRAINTS` in its plugin capabilities, external-provisioner prepares `CreateVolumeRequest.AccessibilityRequirements` while calling `Controller.CreateVolume`. The driver has to consider these topology constraints while creating the volume. Below table shows how these `AccessibilityRequirements` are prepared:\n\n[Delayed binding](https://kubernetes.io/docs/concepts/storage/storage-classes/#volume-binding-mode) | Strict topology | [Allowed topologies](https://kubernetes.io/docs/concepts/storage/storage-classes/#allowed-topologies) | [Resulting accessability requirements](https://github.com/container-storage-interface/spec/blob/master/spec.md#createvolume)\n:---: |:---:|:---:|:---|\nYes | Yes | Irrelevant | `Requisite` = `Preferred` = Selected node topology\nYes | No | No | `Requisite` = Aggregated cluster topology
`Preferred` = `Requisite` with selected node topology as first element\nYes | No | Yes | `Requisite` = Allowed topologies
`Preferred` = `Requisite` with selected node topology as first element\nNo | Irrelevant | No | `Requisite` = Aggregated cluster topology
`Preferred` = `Requisite` with randomly selected node topology as first element\nNo | Irrelevant | Yes | `Requisite` = Allowed topologies
`Preferred` = `Requisite` with randomly selected node topology as first element\n\n### CSI error and timeout handling\nThe external-provisioner invokes all gRPC calls to CSI driver with timeout provided by `--timeout` command line argument (15 seconds by default).\n\nCorrect timeout value and number of worker threads depends on the storage backend and how quickly it is able to processes `ControllerCreateVolume` and `ControllerDeleteVolume` calls. The value should be set to accommodate majority of them. It is fine if some calls time out - such calls will be retried after exponential backoff (starting with 1s by default), however, this backoff will introduce delay when the call times out several times for a single volume.\n\nFrequency of `ControllerCreateVolume` and `ControllerDeleteVolume` retries can be configured by `--retry-interval-start` and `--retry-interval-max` parameters. The external-provisioner starts retries with `retry-interval-start` interval (1s by default) and doubles it with each failure until it reaches `retry-interval-max` (5 minutes by default). The external provisioner stops increasing the retry interval when it reaches `retry-interval-max`, however, it still retries provisioning/deletion of a volume until it's provisioned. The external-provisioner keeps its own number of provisioning/deletion failures for each volume.\n\nThe external-provisioner can invoke up to `--worker-threads` (100 by default) `ControllerCreateVolume` **and** up to `--worker-threads` `ControllerDeleteVolume` calls in parallel, i.e. these two calls are counted separately. The external-provisioner assumes that the storage backend can cope with such high number of parallel requests and that the requests are handled in relatively short time (ideally sub-second). Lower value should be used for storage backends that expect slower processing related to newly created / deleted volumes or can handle lower amount of parallel calls.\n\nDetails of error handling of individual CSI calls:\n* `ControllerCreateVolume`: The call might have timed out just before the driver provisioned a volume and was sending a response. From that reason, timeouts from `ControllerCreateVolume` is considered as \"*volume may be provisioned*\" or \"*volume is being provisioned in the background*.\" The external-provisioner will retry calling `ControllerCreateVolume` after exponential backoff until it gets either successful response or final (non-timeout) error that the volume cannot be created.\n* `ControllerDeleteVolume`: This is similar to `ControllerCreateVolume`, The external-provisioner will retry calling `ControllerDeleteVolume` with exponential backoff after timeout until it gets either successful response or a final error that the volume cannot be deleted.\n* `Probe`: The external-provisioner retries calling Probe until the driver reports it's ready. It retries also when it receives timeout from `Probe` call. The external-provisioner has no limit of retries. It is expected that ReadinessProbe on the driver container will catch case when the driver takes too long time to get ready.\n* `GetPluginInfo`, `GetPluginCapabilitiesRequest`, `ControllerGetCapabilities`: The external-provisioner expects that these calls are quick and does not retry them on any error, including timeout. Instead, it assumes that the driver is faulty and exits. Note that Kubernetes will likely start a new provisioner container and it will start with `Probe` call.\n\n## Community, discussion, contribution, and support\n\nLearn how to engage with the Kubernetes community on the [community page](http://kubernetes.io/community/).\n\nYou can reach the maintainers of this project at:\n\n- [Slack channel](https://kubernetes.slack.com/messages/sig-storage)\n- [Mailing list](https://groups.google.com/forum/#!forum/kubernetes-sig-storage)\n\n### Code of conduct\n\nParticipation in the Kubernetes community is governed by the [Kubernetes Code of Conduct](code-of-conduct.md).\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",58429389,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":126,"_127":90,"_128":29,"_129":52,"_53":130,"_131":132,"_133":123,"_134":126,"_135":62,"_136":17},"content_type","creator",72806,"full_size",20820970,"id",83198080,"images",[97,114,120],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"architecture","amd64","digest","sha256:a319cf76d3f39388dffb3613baa46d4e9f43e1e0f3a144fdaaf5592d55dbcddb","features","","last_pulled","2026-09-19T08:20:46.089032621Z","last_pushed","2020-01-19T17:57:40Z","os","linux","os_features","os_version","size","variant",{"_98":115,"_100":116,"_102":103,"_104":117,"_106":118,"_108":109,"_110":103,"_111":-5,"_112":119,"_59":62,"_113":-5},"arm64","sha256:8b83a699c8886530c4fff26ba830e83980565c72cd686c0360383c1687dea3a8","2026-09-19T08:20:46.114600112Z","2020-01-19T17:57:39Z",19411749,{"_98":121,"_100":122,"_102":103,"_104":123,"_106":118,"_108":109,"_110":103,"_111":-5,"_112":124,"_59":62,"_113":125},"arm","sha256:c37b593400d09b7a918efe0a5133f8259cc14c62fd0316811cde2258f224769d","2026-09-19T08:20:46.12112184Z",19499660,"v7","2020-01-19T17:57:39.682015Z","last_updater","last_updater_username","media_type","latest","repository",8342565,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":146,"_153":154,"_142":165,"_166":11},{"_36":147,"_38":148,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":149,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":150,"_75":11,"_76":152,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":151},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_155":60,"_156":-5,"_157":-5,"_158":159},"count","next","previous","results",[160],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":161,"_46":126,"_127":90,"_128":29,"_129":52,"_53":130,"_131":132,"_133":123,"_134":126,"_135":62,"_136":17},[162,163,164],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},{"_98":115,"_100":116,"_102":103,"_104":117,"_106":118,"_108":109,"_110":103,"_111":-5,"_112":119,"_59":62,"_113":-5},{"_98":121,"_100":122,"_102":103,"_104":123,"_106":118,"_108":109,"_110":103,"_111":-5,"_112":124,"_59":62,"_113":125},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
a319cf76d3f3	linux/amd64	19.86 MB
c37b593400d0	linux/arm/v7	18.6 MB
8b83a699c888	linux/arm64	18.51 MB

boky/csi-provisioner

Tags for boky/csi-provisioner