diff --git a/docs/usage.md b/docs/usage.md index 918f5131..d7a1814e 100644 --- a/docs/usage.md +++ b/docs/usage.md @@ -283,16 +283,47 @@ https://kubernetes.io/docs/tasks/configure-pod-container/configure-persistent-vo To get started, in an OpenShift environment, we need to relax the security of your cluster, so pods are allowed to use the **hostPath** volume plugin without granting everyone access to the privileged **SCC**: -1. Edit the restricted SCC: +1. Create new SCC to allow hostpath: ``` -$ oc edit scc restricted +$ oc create -f - << EOF +--- +allowHostDirVolumePlugin: true +allowHostIPC: false +allowHostNetwork: false +allowHostPID: false +allowHostPorts: false +allowPrivilegeEscalation: true +allowPrivilegedContainer: false +allowedCapabilities: null +apiVersion: security.openshift.io/v1 +defaultAddCapabilities: null +fsGroup: + type: MustRunAs +groups: +- system:authenticated +kind: SecurityContextConstraints +metadata: + name: hostpath +priority: null +readOnlyRootFilesystem: false +requiredDropCapabilities: +- KILL +- MKNOD +- SETUID +- SETGID +runAsUser: + type: MustRunAsRange +seLinuxContext: + type: MustRunAs +supplementalGroups: + type: RunAsAny +users: [] +volumes: +- hostPath +EOF ``` -2. Add `allowHostDirVolumePlugin: true` - -3. Save the changes - -4. Restart node service (master node). +2. Restart node service (master node). ``` $ sudo systemctl restart origin-node.service ``` @@ -326,7 +357,7 @@ EOF | StorageClass Options | Type | Parameters | Example | |----------------------|---------|--------------------------------------------|----------------------------------| | size | integer | - | size: "10" | -| provisioning | String | thin, thick | provisioning: "thin" | +| provisioning | String | thin, full | provisioning: "thin" | | flash-cache | String | true, false | flash-cache: "true" | | compression | boolean | true, false | compression: "true" | | MountConflictDelay | integer | - | MountConflictDelay: "30" | @@ -337,6 +368,10 @@ EOF | retentionHours | integer | option of virtualCopyOf | retentionHours: "10" | | accessModes | String | ReadWriteOnce | accessModes:
   - ReadWriteOnce | | replicationGroup | String | 3PAR RCG name | replicationGroup: "Test-RCG" | +| cpg | String | 3PAR CPG name | cpg: 'SSD_r6' | +| snapcpg | String | 3PAR snapCPG name | cpg: 'FC_r6' | +| backend | String | 3PAR name which defined in hpe.conf | bankend: '3PAR1' | +| fsOwner | String | User ID and Group ID | fsOwner: '1001:1001' | ### Persistent Volume Claim Example