diff --git a/modules/persistent-storage-csi-drivers-supported.adoc b/modules/persistent-storage-csi-drivers-supported.adoc index 0cdebe61e412..531c6d7fadd1 100644 --- a/modules/persistent-storage-csi-drivers-supported.adoc +++ b/modules/persistent-storage-csi-drivers-supported.adoc @@ -44,30 +44,30 @@ In addition to the drivers listed in the following table, {product-title} functi endif::openshift-rosa,openshift-rosa-hcp,openshift-aro[] .Supported CSI drivers and features in {product-title} -[cols=",^v,^v,^v,^v,^v,^v width="100%",options="header"] +[cols=",^v,^v,^v,^v,^v,^v ,^v width="100%",options="header"] |=== -|CSI driver |CSI volume snapshots |CSI volume group snapshots ^[1]^ |CSI cloning |CSI resize |Inline ephemeral volumes -|AWS EBS | ✅ | | | ✅| -|AWS EFS | | | | | +|CSI driver |CSI volume snapshots |CSI volume group snapshots ^[1]^ |CSI cloning |CSI resize |Inline ephemeral volumes |User namespaces +|AWS EBS | ✅ | | | ✅| |✅ +|AWS EFS | | | | | | ifndef::openshift-rosa,openshift-rosa-hcp[] -|Google Compute Platform (GCP) persistent disk (PD)| ✅| |✅^[2]^ | ✅| -|GCP Filestore | ✅ | | | ✅| +|Google Compute Platform (GCP) persistent disk (PD)| ✅| |✅^[2]^ | ✅| |✅ +|GCP Filestore | ✅ | | | ✅| | endif::openshift-rosa,openshift-rosa-hcp[] ifndef::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] -|{ibm-power-server-name} Block | | | | ✅ | -|{ibm-cloud-name} Block | ✅^[3]^ | | | ✅^[3]^| +|{ibm-power-server-name} Block | | | | ✅ | |✅ +|{ibm-cloud-name} Block | ✅^[3]^ | | | ✅^[3]^| |✅ endif::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] -|LVM Storage | ✅ | | ✅ | ✅ | +|LVM Storage | ✅ | | ✅ | ✅ | |✅ ifndef::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] -|Microsoft Azure Disk | ✅ | | ✅ | ✅| -|Microsoft Azure Stack Hub | ✅ | | ✅ | ✅| -|Microsoft Azure File | ✅^[4]^ | | ✅^[4]^ | ✅| ✅ -|OpenStack Cinder | ✅ | | ✅ | ✅| -|OpenShift Data Foundation | ✅ | ✅ | ✅ | ✅| -|OpenStack Manila | ✅ | | | ✅ | -|Shared Resource | | | | | ✅ -|CIFS/SMB | | | ✅ | | -|VMware vSphere | ✅^[5]^ | | | ✅^[6]^| +|Microsoft Azure Disk | ✅ | | ✅ | ✅| | ✅ +|Microsoft Azure Stack Hub | ✅ | | ✅ | ✅| |✅ +|Microsoft Azure File | ✅^[4]^ | | ✅^[4]^ | ✅| ✅ | +|OpenStack Cinder | ✅ | | ✅ | ✅| |✅ +|OpenShift Data Foundation | ✅ | ✅ | ✅ | ✅| |✅ ^[5]^ +|OpenStack Manila | ✅ | | | ✅ | | +|Shared Resource | | | | | ✅ | +|CIFS/SMB | | | ✅ | | | +|VMware vSphere | ✅^[6]^ | | | ✅^[7]^| |✅ ^[8]^ endif::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] |=== ifndef::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] @@ -96,12 +96,20 @@ include::snippets/technology-preview.adoc[leveloffset=+1] 5. +* RBD supports user namespaces; CephFS does not. + +6. + * Requires VMware vSphere version 8.0 Update 1 or later, or VMware vSphere Foundation (VVF) 9, or VMware Cloud Foundation (VCF) 9, for both vCenter Server and ESXi. * Does not support fileshare volumes. -6. +7. * Online expansion is supported from VMware vSphere version 8.0 Update 1 and later, or VVF 9, or VCF 9. -- -endif::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] \ No newline at end of file +endif::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[] + +8. + +* File persistent volumes (PVs), such as vSAN file service, do not support user namespaces. \ No newline at end of file diff --git a/nodes/pods/nodes-pods-user-namespaces.adoc b/nodes/pods/nodes-pods-user-namespaces.adoc index 798b0d60ca69..7d840fb9142b 100644 --- a/nodes/pods/nodes-pods-user-namespaces.adoc +++ b/nodes/pods/nodes-pods-user-namespaces.adoc @@ -19,6 +19,8 @@ When running a pod in an isolated user namespace, the UID/GID inside a pod conta Not all file systems currently support ID-mapped mounts, such as Network File Systems (NFS) and other network/distributed file systems. Any pod that is using an NFS-backed persistent volume from a vendor that does not support ID-mapped mounts might experience access or permission issues when running in a user namespace. This behavior is not specific to {product-title}. It applies to all Kubernetes distributions from Kubernetes v1.33 onward. ==== +To check user namespaces support for storage options, see xref:../../storage/container_storage_interface/persistent-storage-csi.adoc#csi-drivers-supported_persistent-storage-csi[CSI drivers supported by {product-title}]. + // The following include statements pull in the module files that comprise // the assembly. Include any combination of concept, procedure, or reference // modules required to cover the user story. You can also include other diff --git a/storage/persistent_storage/persistent-storage-nfs.adoc b/storage/persistent_storage/persistent-storage-nfs.adoc index 7a89412dc5a5..8567fb62e87b 100644 --- a/storage/persistent_storage/persistent-storage-nfs.adoc +++ b/storage/persistent_storage/persistent-storage-nfs.adoc @@ -13,6 +13,11 @@ NFS-specific information contained in a PV definition could also be defined directly in a `Pod` definition, doing so does not create the volume as a distinct cluster resource, making the volume more susceptible to conflicts. +[NOTE] +==== +The in-tree NFS provisioner does not support user namespaces. +==== + [role="_additional-resources"] .Additional resources