deep-dive-into-windows-csi-driver-hostprocess-containers-cheng-windows-csitan-xiao-hostprocessj-andy-zhang-ostc-weizhi-chen-microsoft.pdf

1、Deep Dive Into Windows CSI Driver HostProcess ContainersAndy Zhang,Principal Software Engineer MicrosoftIntroAndy Zhang(张夏张夏)Storage Dev lead AKS(Azure Kubernetes Service)TeamMaintainer of multiple k8sprojectsAzure Disk/File/Blob CSI driversSMB,NFS under volume provisionercsi-proxyGithub:andyzhangxE

2、mail:Slack:andyzhang kubernetes3AgendaIntroductionBackground of Windows csi-proxy projectIntroduction of HostProcess containerMigrate CSI driver on Windows from csi-proxy dependent to HostProcess container deploymentKey learnings and gotchasMigration progress of cloud providersConclusion and plans4I

3、ntroductionMost CSI drivers rely on csi-proxy process on Window nodecsi-proxy performs privileged storage operations on behalf of CSI driver containersWindows HostProcess ContainerIntroduced in k8s 1.23 and stable on k8s 1.26run directly on the Windows host as a regular process with privilegesSwitch

4、ing to HostProcess container deployment will make Windows CSI driver development and deployment easier5Background of windows csi-proxy projectin-tree(built-in)storage driverKubelet handles privileged operations for in-tree storage drivers on both Linux and Windows nodese.g.disk format,mount/unmountC

5、SI driverintroduced in k8s 1.13in-tree driver removal and migrate to CSI driverNode plugin containers require elevated privileges to perform storage operationsPrior to Kubernetes v1.23,privileged pods are only supported on Linux nodes and not on Windows nodes6How CSI driver interacts with k8s on Lin

6、ux node7format/mount volumeHow CSI driver interacts with k8s on Windows node using csi-proxyReference:https:/ of HostProcess containerHostProcess containerIntroduced in k8s v1.23,GA in v1.26Run directly on the host as a regular process with privilegesBenefits against csi-proxy for CSI driver on Wind