aws-fsx-csi-driver
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
Compare:
1
# Default values for helm.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
image:
6
repository: cgr.dev/chainguard-private/aws-fsx-csi-driver
7
tag: 1.11.0-r6@sha256:841ef67b2aa833e33f1939ddfd2aae979c4d37480ba0fe8bdf8ef25731aa1119
8
pullPolicy: IfNotPresent
9
csidriver:
10
fsGroupPolicy: ReadWriteOnceWithFSType
11
sidecars:
12
livenessProbe:
13
image:
14
repository: cgr.dev/chainguard-private/kubernetes-csi-livenessprobe
15
tag: 2.20.0-r4@sha256:614ec98bc91dcdeee51625a4a3b4bb8aa1305b49eb70b9ac353d40203f101688
16
pullPolicy: IfNotPresent
17
resources:
18
requests:
19
cpu: 10m
20
memory: 32Mi
21
limits:
22
memory: 128Mi
23
securityContext:
24
readOnlyRootFilesystem: true
25
allowPrivilegeEscalation: false
26
nodeDriverRegistrar:
27
image:
28
repository: cgr.dev/chainguard-private/kubernetes-csi-node-driver-registrar
29
tag: 2.18.0-r5@sha256:7d43b6a7c7272f71ea4c37ed45707ca4b4065c3424b75ed3dc3b714118a0799e
30
pullPolicy: IfNotPresent
31
logLevel: 2
32
resources:
33
requests:
34
cpu: 10m
35
memory: 32Mi
36
limits:
37
memory: 128Mi
38
securityContext:
39
readOnlyRootFilesystem: true
40
allowPrivilegeEscalation: false
41
provisioner:
42
image:
43
repository: cgr.dev/chainguard-private/kubernetes-csi-external-provisioner
44
tag: 6.4.0-r2@sha256:2331b47ad4fe5dca69a2391f61851167acaa88e41f622d3c02e856b25cb2d9a2
45
pullPolicy: IfNotPresent
46
logLevel: 2
47
resources:
48
requests:
49
cpu: 10m
50
memory: 32Mi
51
limits:
52
memory: 128Mi
53
securityContext:
54
readOnlyRootFilesystem: true
55
allowPrivilegeEscalation: false
56
resizer:
57
image:
58
repository: cgr.dev/chainguard-private/kubernetes-csi-external-resizer
59
tag: 2.3.0-r5@sha256:1797c2c7ff48e26a38807bfedafd188c795fe3d1c1a5e6fe35be398bb3ac88e0
60
pullPolicy: IfNotPresent
61
logLevel: 2
62
resources:
63
requests:
64
cpu: 10m
65
memory: 32Mi
66
limits:
67
memory: 128Mi
68
securityContext:
69
readOnlyRootFilesystem: true
70
allowPrivilegeEscalation: false
71
controller:
72
mode: controller
73
loggingFormat: text
74
nodeSelector: {}
75
replicaCount: 2
76
# PriorityClass assigned to the controller pod. Influences scheduling and
77
# preemption order. Defaults to the built-in system-cluster-critical class.
78
priorityClassName: system-cluster-critical
79
# enableMetrics enables the Prometheus metrics endpoint on the controller.
80
# When true, the driver exposes metrics on port 3301.
81
enableMetrics: false
82
# enablePrometheusAnnotations adds prometheus.io scrape annotations to the controller pod.
83
enablePrometheusAnnotations: true
84
# serviceMonitor controls creation of Prometheus Operator ServiceMonitor resources.
85
# Requires the Prometheus Operator CRDs to be installed.
86
serviceMonitor:
87
enabled: false
88
#If you do want to specify resources, uncomment the following lines, adjust them as necessary
89
resources:
90
requests:
91
cpu: 10m
92
memory: 40Mi
93
limits:
94
memory: 256Mi
95
serviceAccount:
96
# Specifies whether a service account should be created
97
create: true
98
## Enable if EKS IAM for SA is used
99
# eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/fsx-csi-role
100
name: fsx-csi-controller-sa
101
annotations: {}
102
logLevel: 2
103
podAnnotations: {}
104
# AWS region to use. If not specified then the region will be looked up via the AWS EC2 metadata
105
# service.
106
# ---
107
# region: us-east-1
108
region:
109
tolerations:
110
- key: CriticalAddonsOnly
111
operator: Exists
112
- effect: NoExecute
113
operator: Exists
114
tolerationSeconds: 300
115
# Specify the timeout of all calls to the CSI driver.
116
timeout: 5m
117
# securityContext on the controller pod
118
securityContext:
119
runAsNonRoot: false
120
runAsUser: 0
121
runAsGroup: 0
122
fsGroup: 0
123
# securityContext on the controller container
124
# Setting privileged=false will cause the "delete-access-point-root-dir" controller option to fail
125
containerSecurityContext:
126
privileged: true
127
leaderElectionRenewDeadline: 10s
128
leaderElectionLeaseDuration: 15s
129
affinity:
130
nodeAffinity:
131
preferredDuringSchedulingIgnoredDuringExecution:
132
- weight: 1
133
preference:
134
matchExpressions:
135
- key: eks.amazonaws.com/compute-type
136
operator: NotIn
137
values:
138
- fargate
139
podLabels: {}
140
# topologySpreadConstraints:
141
# - maxSkew: 1
142
# topologyKey: topology.kubernetes.io/zone
143
# whenUnsatisfiable: ScheduleAnyway
144
# - maxSkew: 1
145
# topologyKey: kubernetes.io/hostname
146
# whenUnsatisfiable: ScheduleAnyway
147
topologySpreadConstraints: []
148
podDisruptionBudget:
149
# Warning: Disabling PodDisruptionBudget may lead to delays in stateful workloads starting due to controller
150
# pod restarts or evictions.
151
enabled: true
152
# Extra tags to attach to each dynamically provisioned file system.
153
# ---
154
# extraTags:
155
# key1: value1
156
# key2: value2
157
extraTags: {}
158
node:
159
mode: node
160
loggingFormat: text
161
logLevel: 2
162
kubeletPath: /var/lib/kubelet
163
# PriorityClass assigned to the node pods. Influences scheduling and
164
# preemption order. Defaults to the built-in system-node-critical class.
165
priorityClassName: system-node-critical
166
# How long NodeUnpublishVolume waits for a normal unmount before escalating to
167
# `umount -f`. While waiting, the driver periodically checks whether the target
168
# has stopped being a mount point, so a umount(8) that blocks in the kernel
169
# after the filesystem is already detached no longer holds the volume's
170
# in-flight lock forever. Must be at least 30s. Set to 0 to skip the normal
171
# unmount and force immediately. Unset (the default) disables the feature and
172
# preserves the plain blocking unmount.
173
# ---
174
# forcefulUnmountTimeout: 2m
175
forcefulUnmountTimeout: ""
176
# Additional arguments passed to the fsx-plugin container.
177
# ---
178
# extraArgs:
179
# - --forceful-unmount-timeout=2m
180
extraArgs: []
181
nodeSelector: {}
182
updateStrategy: {}
183
#If you do want to specify resources, uncomment the following lines, adjust them as necessary,
184
resources:
185
requests:
186
cpu: 10m
187
memory: 40Mi
188
limits:
189
memory: 256Mi
190
dnsPolicy: ClusterFirst
191
dnsConfig: {}
192
# Example config which uses the AWS nameservers
193
# dnsPolicy: "None"
194
# dnsConfig:
195
# nameservers:
196
# - 169.254.169.253
197
serviceAccount:
198
# Specifies whether a service account should be created
199
create: true
200
## Enable if EKS IAM for SA is used
201
# eks.amazonaws.com/role-arn: arn:aws:iam::111122223333:role/fsx-csi-role
202
name: fsx-csi-node-sa
203
annotations: {}
204
healthPort: 9809
205
# securityContext on the node pod
206
securityContext:
207
# The node pod must be run as root to bind to the registration/driver sockets
208
runAsNonRoot: false
209
runAsUser: 0
210
runAsGroup: 0
211
fsGroup: 0
212
env: []
213
volumes: []
214
volumeMounts: []
215
podAnnotations: {}
216
tolerateAllTaints: true
217
tolerations:
218
- operator: Exists
219
effect: NoExecute
220
tolerationSeconds: 300
221
affinity:
222
nodeAffinity:
223
requiredDuringSchedulingIgnoredDuringExecution:
224
nodeSelectorTerms:
225
- matchExpressions:
226
- key: eks.amazonaws.com/compute-type
227
operator: NotIn
228
values:
229
- fargate
230
podLabels: {}
231
nameOverride: ""
232
fullnameOverride: ""
233
imagePullSecrets: []
234
nodeComponentOnly: false
235
# nodeComponentOnly: true
236
# Only deploys the node DaemonSet, Skips controller deployment
237
# nodeComponentOnly: false (default)
238
# Deploys both controller and node components, normal full deployment
239
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.