privilegedescalation-ceo[bot]
2e2713fd3f
Users choose their own namespace for Headlamp. Replace all hardcoded kube-system references that indicate Headlamp's install namespace with <your-namespace> so users substitute their own value. Upstream workload references left untouched: - tns-csi controller pods in kube-system (upstream CSI driver) - NetworkPolicy selectors targeting kube-system - API server proxy paths to kube-system pods Refs: PRI-434 Co-authored-by: Chris Farhood <chris@farhood.org> Co-authored-by: Paperclip <noreply@paperclip.ing>
100 lines
2.7 KiB
Markdown
100 lines
2.7 KiB
Markdown
# Quick Start
|
|
|
|
Get the TNS-CSI plugin running in Headlamp in about 5 minutes.
|
|
|
|
## Prerequisites
|
|
|
|
- Headlamp v0.20+ running in your cluster
|
|
- tns-csi driver installed in `kube-system`
|
|
- `kubectl` access to your cluster
|
|
|
|
## Step 1: Install the Plugin
|
|
|
|
### Via Headlamp UI (Easiest)
|
|
|
|
1. Open Headlamp and navigate to **Settings → Plugins → Catalog**
|
|
2. Search for **"TNS CSI"** or **"TrueNAS"**
|
|
3. Click **Install**
|
|
4. Refresh the browser
|
|
|
|
### Via Helm
|
|
|
|
Add the plugin source to your Headlamp Helm values:
|
|
|
|
```yaml
|
|
config:
|
|
pluginsDir: /headlamp/plugins
|
|
|
|
pluginsManager:
|
|
sources:
|
|
- name: tns-csi
|
|
url: https://github.com/privilegedescalation/headlamp-tns-csi-plugin/releases/download/v0.2.4/tns-csi-0.2.4.tar.gz
|
|
```
|
|
|
|
Then upgrade your Headlamp release:
|
|
|
|
```bash
|
|
helm upgrade headlamp headlamp/headlamp -f values.yaml -n <your-namespace>
|
|
```
|
|
|
|
## Step 2: Configure RBAC
|
|
|
|
The plugin needs read access to storage resources and the tns-csi controller pod's metrics endpoint.
|
|
|
|
Apply the minimal RBAC:
|
|
|
|
```bash
|
|
kubectl apply -f - <<'EOF'
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: headlamp-tns-csi-reader
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources: ["persistentvolumes", "persistentvolumeclaims", "pods"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["storage.k8s.io"]
|
|
resources: ["storageclasses", "csidrivers"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshots", "volumesnapshotclasses"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: [""]
|
|
resources: ["pods/log", "pods/proxy"]
|
|
verbs: ["get"]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: headlamp-tns-csi
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: headlamp
|
|
namespace: <your-namespace>
|
|
roleRef:
|
|
kind: ClusterRole
|
|
name: headlamp-tns-csi-reader
|
|
apiGroup: rbac.authorization.k8s.io
|
|
EOF
|
|
```
|
|
|
|
Adjust `name: headlamp` and `namespace: <your-namespace>` to match your Headlamp service account.
|
|
|
|
## Step 3: Verify
|
|
|
|
1. Open Headlamp — you should see **TrueNAS (tns-csi)** in the left sidebar
|
|
2. Click **Overview** — you should see the driver health card and storage summary
|
|
3. Click **Storage Classes** — your tns-csi StorageClasses should appear with Protocol, Pool, and Server filled in
|
|
|
|
## Troubleshooting
|
|
|
|
| Problem | Fix |
|
|
| ------- | --- |
|
|
| No sidebar entry | Hard-refresh browser (Cmd+Shift+R) |
|
|
| Driver shows "Not installed" | Run `kubectl get csidriver tns.csi.io` |
|
|
| StorageClasses empty | Check `kubectl get sc` for `tns.csi.io` provisioner |
|
|
| Protocol/Pool/Server show "—" | Check `kubectl get sc <name> -o yaml` for `.parameters` |
|
|
| Metrics page empty | Verify controller pod exposes port 8080 |
|
|
|
|
For more detail see [Troubleshooting](../troubleshooting/README.md).
|