aws-efs-csi-driver
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Default values for aws-efs-csi-driver.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
nameOverride: ""
6
fullnameOverride: ""
7
useFIPS: false
8
portRangeUpperBound: "21049"
9
debugLogs: false
10
image:
11
repository: cgr.dev/chainguard-private/aws-efs-csi-driver
12
tag: 3.5.0@sha256:4c1ad1d23e6514aaea04339689b50c033afba6a5ba0e93835eb4a7befa3748ad
13
pullPolicy: IfNotPresent
14
sidecars:
15
livenessProbe:
16
image:
17
repository: cgr.dev/chainguard-private/kubernetes-csi-livenessprobe
18
tag: 2.20.0@sha256:4599a5594bda1019579c16106071955c57c4c6081d7fedd1f270837e9f2d049a
19
pullPolicy: IfNotPresent
20
resources: {}
21
securityContext:
22
readOnlyRootFilesystem: true
23
allowPrivilegeEscalation: false
24
nodeDriverRegistrar:
25
image:
26
repository: cgr.dev/chainguard-private/kubernetes-csi-node-driver-registrar
27
tag: 2.18.0@sha256:9bcc77232f2d4460290d9884310d25d3e4ef23b627e54c71397c9ebe33183bd2
28
pullPolicy: IfNotPresent
29
resources: {}
30
securityContext:
31
readOnlyRootFilesystem: true
32
allowPrivilegeEscalation: false
33
csiProvisioner:
34
image:
35
repository: cgr.dev/chainguard-private/kubernetes-csi-external-provisioner
36
tag: 6.3.0@sha256:b073ec9e2046a175cdc05eb813421d4cd9a042ad2227c209ffcae64b80cd6b58
37
pullPolicy: IfNotPresent
38
resources: {}
39
securityContext:
40
readOnlyRootFilesystem: true
41
allowPrivilegeEscalation: false
42
additionalArgs: []
43
env: []
44
imagePullSecrets: []
45
## Controller deployment variables
46
controller:
47
# Specifies whether a deployment should be created
48
create: true
49
# Name of the CSI controller service
50
name: efs-csi-controller
51
# Number of replicas for the CSI controller service deployment
52
replicaCount: 2
53
# enableMetrics enables the Prometheus metrics endpoint on the controller.
54
# When true, the driver exposes metrics on port 3301.
55
enableMetrics: false
56
# enablePrometheusAnnotations adds prometheus.io scrape annotations to the controller pod.
57
enablePrometheusAnnotations: true
58
# serviceMonitor controls creation of Prometheus Operator ServiceMonitor resources.
59
# Requires the Prometheus Operator CRDs to be installed.
60
serviceMonitor:
61
enabled: false
62
# Number for the log level verbosity
63
logLevel: 2
64
# If set, add pv/pvc metadata to plugin create requests as parameters.
65
extraCreateMetadata: true
66
# Add additional tags to access points.
67
# NOTE: Custom tags require the controller's IAM policy to allow the extra tag
68
# keys on elasticfilesystem:CreateAccessPoint. The AWS-managed
69
# AmazonEFSCSIDriverPolicy only permits the default efs.csi.aws.com/cluster tag
70
# key, so custom tags will cause access point creation to fail (PVCs stuck in
71
# Pending) unless you attach a custom policy. See docs/install.md
72
# ("Custom tags require additional IAM permissions").
73
tags: {}
74
# environment: prod
75
# region: us-east-1
76
# Enable if you want the controller to also delete the
77
# path on efs when deleteing an access point
78
deleteAccessPointRootDir: false
79
podAnnotations: {}
80
podLabels: {}
81
hostNetwork: false
82
priorityClassName: system-cluster-critical
83
dnsPolicy: ClusterFirst
84
dnsConfig: {}
85
additionalLabels: {}
86
resources: {}
87
# We usually recommend not to specify default resources and to leave this as a conscious
88
# choice for the user. This also increases chances charts run on environments with little
89
# resources, such as Minikube. If you do want to specify resources, uncomment the following
90
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
91
# limits:
92
# cpu: 100m
93
# memory: 128Mi
94
# requests:
95
# cpu: 100m
96
# memory: 128Mi
97
revisionHistoryLimit: 10
98
nodeSelector: {}
99
tolerations:
100
- key: CriticalAddonsOnly
101
operator: Exists
102
- key: efs.csi.aws.com/agent-not-ready
103
operator: Exists
104
affinity: {}
105
env: []
106
volumes: []
107
volumeMounts: []
108
socketDirVolume:
109
emptyDir: {}
110
# Specifies whether a service account should be created
111
serviceAccount:
112
create: true
113
name: efs-csi-controller-sa
114
annotations: {}
115
## Enable if EKS IAM for SA is used
116
# eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/efs-csi-role
117
healthPort: 9909
118
regionalStsEndpoints: false
119
# Liveness probe configuration for the controller
120
livenessProbe:
121
httpGet:
122
path: /healthz
123
port: healthz
124
initialDelaySeconds: 10
125
timeoutSeconds: 3
126
periodSeconds: 10
127
failureThreshold: 5
128
# Readiness probe configuration for the controller (optional)
129
readinessProbe: {}
130
# httpGet:
131
# path: /healthz
132
# port: healthz
133
# initialDelaySeconds: 10
134
# timeoutSeconds: 3
135
# periodSeconds: 10
136
# failureThreshold: 3
137
# Startup probe configuration for the controller (optional)
138
startupProbe: {}
139
# httpGet:
140
# path: /healthz
141
# port: healthz
142
# initialDelaySeconds: 10
143
# timeoutSeconds: 3
144
# periodSeconds: 10
145
# failureThreshold: 30
146
# Pod Disruption Budget
147
podDisruptionBudget:
148
enabled: false
149
# maxUnavailable: 1
150
minAvailable: 1
151
unhealthyPodEvictionPolicy: IfHealthyBudget
152
# securityContext on the controller pod
153
securityContext:
154
runAsNonRoot: false
155
runAsUser: 0
156
runAsGroup: 0
157
fsGroup: 0
158
# securityContext on the controller container
159
# Setting privileged=false will cause the "delete-access-point-root-dir" controller option to fail
160
containerSecurityContext:
161
privileged: true
162
leaderElectionRenewDeadline: 10s
163
leaderElectionLeaseDuration: 15s
164
# Timeout for Create/DeleteVolume calls to Controller. We recommend increasing for high concurrency workloads
165
timeout: 15s
166
# Number of concurrent threads controller will handle at once.
167
workerThreads: 100
168
# TSCs without the label selector stanza
169
#
170
# Example:
171
#
172
# topologySpreadConstraints:
173
# - maxSkew: 1
174
# topologyKey: topology.kubernetes.io/zone
175
# whenUnsatisfiable: ScheduleAnyway
176
# - maxSkew: 1
177
# topologyKey: kubernetes.io/hostname
178
# whenUnsatisfiable: ScheduleAnyway
179
topologySpreadConstraints: []
180
# Enable reading filesystem IDs from configmap/secret
181
fileSystemIdRefs:
182
enabled: false
183
# rollingUpdate for controller deployment strategy
184
rollingUpdate: {}
185
# maxUnavailable: 1
186
# maxSurge: 1
187
## Node daemonset variables
188
node:
189
# Number for the log level verbosity
190
logLevel: 2
191
volMetricsOptIn: false
192
volMetricsRefreshPeriod: 240
193
volMetricsFsRateLimit: 5
194
hostAliases: {}
195
# For cross VPC EFS, you need to poison or overwrite the DNS for the efs volume as per
196
# https://docs.aws.amazon.com/efs/latest/ug/efs-different-vpc.html#wt6-efs-utils-step3
197
# implementing the suggested solution found here:
198
# https://github.com/kubernetes-sigs/aws-efs-csi-driver/issues/240#issuecomment-676849346
199
# EFS Vol ID, IP, Region
200
# "fs-01234567":
201
# ip: 10.10.2.2
202
# region: us-east-2
203
priorityClassName: system-node-critical
204
dnsPolicy: ClusterFirst
205
dnsConfig: {}
206
# Example config which uses the AWS nameservers
207
# dnsPolicy: "None"
208
# dnsConfig:
209
# nameservers:
210
# - 169.254.169.253
211
podLabels: {}
212
podAnnotations: {}
213
additionalLabels: {}
214
resources: {}
215
# limits:
216
# cpu: 100m
217
# memory: 128Mi
218
# requests:
219
# cpu: 100m
220
# memory: 128Mi
221
revisionHistoryLimit: 10
222
nodeSelector: {}
223
tolerations:
224
- operator: Exists
225
affinity:
226
nodeAffinity:
227
requiredDuringSchedulingIgnoredDuringExecution:
228
nodeSelectorTerms:
229
- matchExpressions:
230
- key: eks.amazonaws.com/compute-type
231
operator: NotIn
232
values:
233
- fargate
234
- hybrid
235
# Specifies whether a service account should be created
236
serviceAccount:
237
create: true
238
name: efs-csi-node-sa
239
annotations: {}
240
## Enable if EKS IAM for SA is used
241
# eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/efs-csi-role
242
# Disable mutating permissions for the node service account.
243
# When disableMutation is true, some features of the EFS CSI Driver node pods will not function, such as taint removal.
244
# Primarily useful in particularly security-sensitive environments, or on multi-tenant clusters that isolate tenants by node.
245
disableMutation: false
246
healthPort: 9809
247
# Liveness probe configuration for the node
248
livenessProbe:
249
httpGet:
250
path: /healthz
251
port: healthz
252
initialDelaySeconds: 10
253
timeoutSeconds: 3
254
periodSeconds: 2
255
failureThreshold: 5
256
# Readiness probe configuration for the node (optional)
257
readinessProbe: {}
258
# httpGet:
259
# path: /healthz
260
# port: healthz
261
# initialDelaySeconds: 10
262
# timeoutSeconds: 3
263
# periodSeconds: 2
264
# failureThreshold: 3
265
# Startup probe configuration for the node (optional)
266
startupProbe: {}
267
# httpGet:
268
# path: /healthz
269
# port: healthz
270
# initialDelaySeconds: 10
271
# timeoutSeconds: 3
272
# periodSeconds: 2
273
# failureThreshold: 30
274
# securityContext on the node pod
275
securityContext:
276
# The node pod must be run as root to bind to the registration/driver sockets
277
runAsNonRoot: false
278
runAsUser: 0
279
runAsGroup: 0
280
fsGroup: 0
281
env: []
282
volumes: []
283
volumeMounts: []
284
kubeletPath: /var/lib/kubelet
285
# rollingUpdate for node deamonset updateStrategy.
286
rollingUpdate: {}
287
# maxSurge: 0
288
# maxUnavailable: 20%
289
290
# Comma-separated section:key=value overrides for efs-utils.conf.
291
# Example: "mount-watchdog:stunnel_health_check_interval_min=1,mount-watchdog:tls_cert_renewal_interval_min=30"
292
efsUtilsConfOverrides: ""
293
# Comma-separated section:key=value overrides for s3files-utils.conf.
294
# Example: "proxy:read_bypass_denylist_size=20000"
295
s3filesUtilsConfOverrides: ""
296
storageClasses: []
297
# Add StorageClass resources like:
298
# - name: efs-sc
299
# annotations:
300
# # Use that annotation if you want this to your default storageclass
301
# storageclass.kubernetes.io/is-default-class: "true"
302
# parameters:
303
# provisioningMode: efs-ap
304
# fileSystemId: fs-1122aabb
305
# directoryPerms: "700"
306
# gidRangeStart: "1000"
307
# gidRangeEnd: "2000"
308
# basePath: "/dynamic_provisioning"
309
# subPathPattern: "/subPath"
310
# ensureUniqueDirectory: true
311
# reclaimPolicy: Delete
312
# volumeBindingMode: Immediate
313
314
# Specifies whether to use helm hooks to apply the CSI driver
315
useHelmHooksForCSIDriver: true
316
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.