#storageclass
been bashing its head against a wall trying to figure out why the cephfs csi provisoner isn't doing anything when it creates a pvc tied to the cephfs storageclass
November 1, 2026 at 5:56 PM
Your StatefulSet pod stuck Pending while the PVC shows Bound? Check kubectl get volumeattachment: an OOMKilled CSI controller can hang Attaching for hours. https://www.valtersit.com/guides/kubernetes/kubernetes-persistentvolumes-storageclass-selection-and-csi-drivers/
Kubernetes PersistentVolumes: StorageClass Selection and CSI Drivers
www.valtersit.com
October 30, 2026 at 5:40 PM
@thermia Nevermind, volumeBindingMode defaults to Immediate and ceph-csi-cephfs's StorageClass doesn't override that (https://github.com/ceph/ceph-csi/blob/v3.18.1/charts/ceph-csi-cephfs/templates/storageclass.yaml).. hm
ceph-csi/charts/ceph-csi-cephfs/templates/storageclass.yaml at v3.18.1 · ceph/ceph-csi
CSI driver for Ceph. Contribute to ceph/ceph-csi development by creating an account on GitHub.
github.com
November 1, 2026 at 7:38 PM
1. Reads two numbers kubelet already exports for every mounted volume:

kubelet_volume_stats_used_bytes / kubelet_volume_stats_capacity_bytes

then joins kube_persistentvolumeclaim_info with group_left. kubelet knows usage; only kube-state-metrics knows the storageclass and PV.
October 27, 2026 at 1:13 AM
Careful crediting the 200 GB to helm uninstall — it leaves PVCs alone by default unless the chart sets helm.sh/resource-policy: delete. More likely your StatefulSet PVCs were dynamically provisioned on a StorageClass with reclaimPolicy: Delete, and the volumes went away with the pods. Worth …
October 18, 2026 at 6:18 PM
A useful troubleshooting section on PVCs stuck pending due to a missing default StorageClass is there too.
October 10, 2026 at 5:30 AM
How it decides: every loop it reads kubelet_volume_stats_* from Prometheus. Free space under the threshold (default 10%) and the PVC request grows by the increase (default 10%), rounded up to a GiB.

Opt-in twice: an annotation on the StorageClass, a storage_limit on the PVC.
September 24, 2026 at 2:03 PM
Bind-mount hardening is the right fix for hostPath-style escapes. For CSI/NAS volumes the same exposure hides one layer down, in the StorageClass - Trident exposes NFS mount options and export policies per backend, and those outlive any pod-level change.
September 21, 2026 at 6:01 PM
Velero restores fail when target clusters lack source storage classes. Fix it with a ConfigMap-driven RestoreItemAction that remaps https://www.valtersit.com/vault/storage-class-remapping-during-disaster-recovery-restores-vi-6cc65f/

#velero #storageclass #ValtersIT
September 19, 2026 at 4:30 PM
I am fed up with all the kubernetes DSL. helm and kustomize may do the work, but I need to learn a lot to do my job. E.g. a task as simple as copy and modify existing StorageClass to support Retain ReclaimPolicy is not easily achievable to me. I need to learn a ton of the syntax and semantics.
August 6, 2025 at 8:23 AM
3/3 The parameters available to a custom StorageClass are described in the official AKS docs here: learn.microsoft.com/en-us/azure/...)
Create a persistent volume with Azure Files in Azure Kubernetes Service (AKS) - Azure Kubernetes Service
Learn how to create a static or dynamic persistent volume with Azure Files for use with multiple concurrent pods in Azure Kubernetes Service (AKS)
learn.microsoft.com
December 3, 2024 at 10:29 PM
2/3 This storage account will be accessible from the Internet, even if the cluster is private and running in a private vnet.

To parameterize the storage account creation and e.g. prevent the account from being accessible via the Internet, you must use a custom StorageClass.
December 3, 2024 at 10:29 PM
Патамушта StorageClass!

Як прокинути файлову систему хосту macOS в поди в Kind.

Може згодом напишу про це. А ви покищо можете тут дати поради👨‍🦯‍➡️👩‍🦯
March 28, 2025 at 7:17 AM
Kubernetes'te StorageClass Nedir? PV, PVC ve Veri Gerçekten Nerede Saklanıyor? Bu yazıda şu konuları inceleyeceğim: PV (Persistent Volume) nedir? PVC (Persistent Volume Claim) nedir? Stor...

#beginners #devops #kubernetes #tutorial

Origin | Interest | Match
Kubernetes'te StorageClass Nedir?
PV, PVC ve Veri Gerçekten Nerede Saklanıyor? Bu yazıda şu konuları inceleyeceğim: PV...
dev.to
February 26, 2026 at 12:14 PM
My least favorite k8s abstraction (from my time at MariaDB before they spun off SkySQL) was that a physical volume claim (pvc) uses StorageClass to determine how many iops are requested in EBS physical volumes (pv).
Kubernetes: The Land of 10,000 Layers
December 12, 2024 at 4:04 PM
Afaik this might happen if you have no storageClass defined in the values.
If that's not the issue can you share the error msg ?
January 19, 2025 at 12:13 PM
Bon donc, j'ai foiré mon déploiement Rook : j'ai oublié le discard sur les options de montage de la storageClass.

OK, j'ai corrigé la storageClass.

Maintenant... comment je corrige les PVC en fait ?

J'ai collé fstrim à l'arrache en attendant, mais c'est cracra.
February 19, 2025 at 1:14 PM
2ème indice "pas de get sur DaemonSets, StatefulSets ni CronJobs malgré un auth can-i qui dit 'yes'"

3ème indice "Aucune StorageClass"
May 24, 2026 at 9:02 PM
Bun v1.2.1リリース。
S3の`storageClass`をサポート、`crypto.generateKeyPair`でX25519をサポート、`toMatchInlineSnapshot()`をサポート。
Bufferをデフォルトでzero fillする`--zero-fill-buffers`をサポートなど "Bun v1.2.1 | Bun Blog" https://bun.sh/blog/bun-v1.2.1 #Bun #ReleaseNote
January 28, 2025 at 12:29 AM
CVE-2025-13281 - Portworx Half-Blind SSRF in kube-controller-manager
CVE ID : CVE-2025-13281

Published : Dec. 14, 2025, 10:15 p.m. | 2 hours, 53 minutes ago

Description : A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when...
CVE-2025-13281 - Portworx Half-Blind SSRF in kube-controller-manager
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).
cvefeed.io
December 15, 2025 at 1:37 AM