Uploaded image for project: 'Docs for Red Hat Developers'
  1. Docs for Red Hat Developers
  2. RHDEVDOCS-3163

Document mounting data using CSI volumes into build

    XMLWordPrintable

Details

    • 5
    • Documentation (Ref Guide, User Guide, etc.), User Experience
    • Undefined

    Description

      Details from the dev epic:

      Why is this important?

      • CSI volumes allow data to be mounted into containers via ephemeral CSI Volumes.
      • Ephemeral CSI volumes are provided by CSI drivers that support this feature. Such drivers include:
      • When using sensitive credentials in a build, accessing secrets as a mounted volume ensure that these credentials are not present in the resulting container image.

      Scenarios

      1. Access private artifact repositories (Artifactory, jFrog, Mavein)
      2. Download RHEL packages in a build

      Acceptance Criteria

      • Builds can mount a CSI volume in a build
      • Content in the CSI volume is not present in the resulting container image.
      • If SCCs do not support fine controls over CSI volumes, provide this feature on a TechPreview basis with a feature gate.

      Note: Please confirm with Developers if this would land as a TP feature. If yes, we will need to add a TP note for this feature.

      Previous Work (Optional):

      BUILD-257 - Build Resource Volume Mounts

      Notes: Explore if it makes sense to document this issue and the  https://issues.redhat.com/browse/RHDEVDOCS-3000 as two modules in one assembly.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              pchandra@redhat.com Preeti Chandrashekar
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: