fix: standalone pod need sa (#20)

Author: lzjqsdd

curvine-csi/templates/clusterrole.yaml

@@ -7,6 +7,7 @@ metadata:
     {{- include "curvine-csi.labels" . | nindent 4 }}
     app.kubernetes.io/component: node
 rules:
+  # Secrets management
   - apiGroups:
       - ""
     resources:
@@ -19,6 +20,37 @@ rules:
       - update
       - patch
       - delete
+  # Pod management for standalone mode
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - watch
+  # ConfigMap for state persistence (standalone mode)
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - update
+      - watch
+  # Events for debugging
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+      - patch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

curvine-csi/templates/daemonset.yaml

@@ -47,6 +47,17 @@ spec:
             - name: FUSE_DEBUG_ENABLED
               value: "true"
             {{- end }}
+            # Mount mode configuration
+            # - "standalone": FUSE runs in independent standalone pod (default, recommended)
+            # - "embedded": FUSE runs in CSI container (legacy mode)
+            - name: MOUNT_MODE
+              value: {{ .Values.node.mountMode | quote }}
+            # Standalone pod image (defaults to same CSI image)
+            - name: STANDALONE_IMAGE
+              value: {{ .Values.node.standaloneImage | quote }}
+            # Standalone pod ServiceAccount (required for standalone mode)
+            - name: STANDALONE_SERVICE_ACCOUNT
+              value: {{ include "curvine-csi.nodeServiceAccountName" . | quote }}
           lifecycle:
             preStop:
               exec:

curvine-csi/templates/deployment.yaml

@@ -43,6 +43,12 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
+            - name: MOUNT_MODE
+              value: {{ .Values.node.mountMode | quote }}
+            - name: STANDALONE_IMAGE
+              value: {{ .Values.node.standaloneImage | quote }}
+            - name: STANDALONE_SERVICE_ACCOUNT
+              value: {{ include "curvine-csi.nodeServiceAccountName" . | quote }}
           livenessProbe:
             failureThreshold: {{ .Values.controller.container.livenessProbe.failureThreshold }}
             httpGet:

curvine-csi/values.yaml

@@ -3,7 +3,7 @@
 
 # Image settings
 image:
-  repository: ghcr.io/curvineio/curvine-csi
+  repository: 10.119.43.210:5000/curvine-csi
   tag: latest
   pullPolicy: Always
 
@@ -85,6 +85,15 @@ node:
   dnsPolicy: ClusterFirstWithHostNet
   fuseDebugEnabled: false
 
+  # Mount mode configuration
+  # - "standalone": FUSE runs in independent standalone pod (default, recommended)
+  # - "embedded": FUSE runs in CSI container (legacy mode)
+  mountMode: standalone
+  
+  # Standalone pod image (used when mountMode=standalone)
+  # Defaults to same image as CSI if not specified
+  standaloneImage: 10.119.43.210:5000/curvine-csi:latest
+
   # Node container settings
   container:
     name: csi-plugin