JuiceFS CSI Driver implements the CSI specification, allowing JuiceFS to be integrated with container orchestration systems. Under Kubernetes, JuiceFS can provide storage service to pods via PersistentVolume.
JuiceFS CSI Driver consists of JuiceFS CSI Controller (StatefulSet) and JuiceFS CSI Node Service (DaemonSet), they can be viewed using
$ kubectl -n kube-system get pod -l app.kubernetes.io/name=juicefs-csi-driver
NAME READY STATUS RESTARTS AGE
juicefs-csi-controller-0 2/2 Running 0 141d
juicefs-csi-node-8rd96 3/3 Running 0 141d
The architecture of the JuiceFS CSI Driver is shown in the figure:
As shown in above diagram, JuiceFS CSI Driver run JuiceFS Client in a dedicated mount pod, CSI Node Service will manage mount pod lifecycle. This architecture proves several advantages:
- When multiple pods reference a same PV, mount pod will be reused. There'll be reference counting on mount pod to decide its deletion.
- Components are decoupled from application pods, allowing CSI Driver to be easily upgraded, see Upgrade JuiceFS CSI Driver.
On the same node, a PVC corresponds to a Mount Pod. The relationship between PVC, PV, and Mount Pod is shown in the following figure:
To use JuiceFS CSI Driver, you can create and manage a PersistentVolume (PV) via "Static Provisioning" or "Dynamic Provisioning". Under static provisioning, you're required to create the PersistentVolume (PV) and PersistentVolumeClaim (PVC), and reference that PVC in pod definition, this is the recommended way if you already have large amount of data stored in JuiceFS, and wish to access directly inside Kubernetes pods.
You can also choose to create PV dynamically via dynamic provisioning: create a PVC and reference it in pod definition, JuiceFS CSI Driver will create the corresponding PV for you.
Take "Dynamic Provisioning" as an example, this is the process of creating and using a PV:
- User creates a PVC (PersistentVolumeClaim) using the JuiceFS StorageClass;
- PV is created and provisioned by CSI Controller, by default, a sub-directory named with PV ID will be created under JuiceFS root;
- Kubernetes PV Controller binds user-created PVC with the PV created by CSI Controller, PVC and PV both enter "Bound" state;
- User creates application pod, referencing PVC previously created;
- CSI Node Service creates mount pod on the associating node;
- A JuiceFS Client runs inside the mount pod, and mounts JuiceFS volume to host, path being
- CSI Node Service waits until mount pod is up and running, and binds PV with the associated container, the PV sub-directory is mounted in pod, path defined by
- Application pod is created by Kubelet.
As explained above, when using JuiceFS CSI Driver, application pod is always accompanied by a mount pod:
default app-web-xxx 1/1 Running 0 1d
kube-system juicefs-host-pvc-xxx 1/1 Running 0 1d
Mount by process
Apart from using a dedicated mount pod (mount by pod), JuiceFS CSI Driver also supports running JuiceFS Client directly inside CSI Node Service, as processes (mount by process). In this mode, one or several JuiceFS Clients will run inside the CSI Node Service pod, managing all JuiceFS mount points for application pods referencing JuiceFS PV in the associating node.
To enable mount by process, add
--by-process=true to CSI Node Service and CSI Controller startup command.
When all JuiceFS Client run inside CSI Node Service pod, it's not hard to imagine that CSI Node Service will be needing more resource. It's recommended to increase resource requests to 1 CPU and 1GiB Memory, limits to 2 CPU and 5GiB Memory, or adjust according to the actual resource usage.
In Kubernetes, mount by pod is no doubt the more recommended way to use JuiceFS CSI Driver. But outside the Kubernetes world, there'll be scenarios requiring the mount by process mode, for example, Use JuiceFS CSI Driver in Nomad.
For versions before v0.10.0, JuiceFS CSI Driver only supports mount by process. For v0.10.0 and above, mount by pod is the default behavior. To upgrade from v0.9 to v0.10, refer to Upgrade under mount by process mode.