feat(helm)!: Allows for the CSI Provisioner Deployment and CSI Node Driver DaemonSet to be configured independently

[NickLarsenNZ]

Description

Part of stackabletech/issues#763

BREAKING: This change allows for the CSI Provisioner Deployment and CSI Node Driver DaemonSet to be configured independently for many settings. See the explanation below for what changes.

Also add in new configurables for priority and preemption.

Helm Values changes

Caution

The original values are no longer valid.

• controller values have been moved to csiProvisioner.controllerService.
• csiProvisioner values have been moved to csiProvisioner.externalProvisioner
• csiNodeDriverRegistrar values have been moved to csiNodeDriver.nodeDriverRegistrar.
• node.driver values have been moved to csiNodeDriver.nodeService.
• podAnnotations has been split into csiProvisioner.podAnnotations and csiNodeDriver.podAnnotations.
• podSecurityContext has been split into csiProvisioner.podSecurityContext and csiNodeDriver.podSecurityContext.
• nodeSelector has been split into csiProvisioner.nodeSelector and csiNodeDriver.nodeSelector.
• tolerations has been split into csiProvisioner.tolerations and csiNodeDriver.tolerations.
• affinity has been split into csiProvisioner.affinity and csiNodeDriver.affinity.

Tip

In addition, the following new values are available.
This is part of stackabletech/issues#765.

• csiProvisioner.priorityClassName
• csiNodeDriver.priorityClassName

diff --git a/deploy/helm/listener-operator/values.yaml b/deploy/helm/listener-operator/values.yaml
index 626c213..2caf9b4 100644
--- a/deploy/helm/listener-operator/values.yaml
+++ b/deploy/helm/listener-operator/values.yaml
@@ -1,34 +1,109 @@
 # Default values for listener-operator.
 ---
+# Used by both the Controller Service and Node Service containers
 image:
   repository: oci.stackable.tech/sdp/listener-operator
+  # tag: 0.0.0-dev
   pullPolicy: IfNotPresent
   pullSecrets: []
 
 csiProvisioner:
-  image:
-    repository: oci.stackable.tech/sdp/sig-storage/csi-provisioner
-    tag: v5.2.0
-    pullPolicy: IfNotPresent
-  resources:
-    requests:
-      cpu: 100m
-      memory: 128Mi
-    limits:
-      cpu: 100m
-      memory: 128Mi
-csiNodeDriverRegistrar:
-  image:
-    repository: oci.stackable.tech/sdp/sig-storage/csi-node-driver-registrar
-    tag: v2.13.0
-    pullPolicy: IfNotPresent
-  resources:
-    requests:
-      cpu: 100m
-      memory: 128Mi
-    limits:
-      cpu: 100m
-      memory: 128Mi
+  podAnnotations: {}
+
+  podSecurityContext: {}
+    # fsGroup: 2000
+
+  nodeSelector: {}
+
+  tolerations: []
+
+  affinity: {}
+
+  controllerService:
+    resources:
+      # Resource requests and limits for the controller pod
+      limits:
+        cpu: 100m
+        memory: 128Mi
+      requests:
+        cpu: 100m
+        memory: 128Mi
+
+    securityContext:
+      # listener-operator requires root permissions
+      runAsUser: 0
+      seLinuxOptions:
+        # Run as "Super Privileged Container" to be allowed to write into
+        # the Listener volumes
+        type: spc_t
+      # capabilities:
+      #   drop:
+      #   - ALL
+      # readOnlyRootFilesystem: true
+      # runAsNonRoot: true
+      # runAsUser: 1000
+
+  externalProvisioner:
+    image:
+      repository: oci.stackable.tech/sdp/sig-storage/csi-provisioner
+      tag: v5.2.0
+      pullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 100m
+        memory: 128Mi
+      limits:
+        cpu: 100m
+        memory: 128Mi
+
+csiNodeDriver:
+  podAnnotations: {}
+
+  podSecurityContext: {}
+    # fsGroup: 2000
+
+  nodeSelector: {}
+
+  tolerations: []
+
+  affinity: {}
+
+  nodeService:
+    resources:
+      # Resource requests and limits for the controller pod
+      limits:
+        cpu: 100m
+        memory: 128Mi
+      requests:
+        cpu: 100m
+        memory: 128Mi
+
+    securityContext:
+      # listener-operator requires root permissions
+      runAsUser: 0
+      seLinuxOptions:
+        # Run as "Super Privileged Container" to be allowed to write into
+        # the Listener volumes
+        type: spc_t
+      # capabilities:
+      #   drop:
+      #   - ALL
+      # readOnlyRootFilesystem: true
+      # runAsNonRoot: true
+      # runAsUser: 1000
+
+  nodeDriverRegistrar:
+    image:
+      repository: oci.stackable.tech/sdp/sig-storage/csi-node-driver-registrar
+      tag: v2.13.0
+      pullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 100m
+        memory: 128Mi
+      limits:
+        cpu: 100m
+        memory: 128Mi
 
 nameOverride: ""
 fullnameOverride: ""
@@ -42,56 +117,10 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: ""
 
-podAnnotations: {}
-
 # Provide additional labels which get attached to all deployed resources
 labels:
   stackable.tech/vendor: Stackable
 
-podSecurityContext: {}
-  # fsGroup: 2000
-
-securityContext:
-  # listener-operator requires root permissions
-  runAsUser: 0
-  seLinuxOptions:
-    # Run as "Super Privileged Container" to be allowed to write into
-    # the Listener volumes
-    type: spc_t
-  # capabilities:
-  #   drop:
-  #   - ALL
-  # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
-  # runAsUser: 1000
-
-controller:
-  resources:
-    # Resource requests and limits for the controller pod
-    limits:
-      cpu: 100m
-      memory: 128Mi
-    requests:
-      cpu: 100m
-      memory: 128Mi
-
-node:
-  driver:
-    resources:
-      # Resource requests and limits for the per node driver container
-      limits:
-        cpu: 100m
-        memory: 128Mi
-      requests:
-        cpu: 100m
-        memory: 128Mi
-
-nodeSelector: {}
-
-tolerations: []
-
-affinity: {}
-
 # When running on a non-default Kubernetes cluster domain, the cluster domain can be configured here.
 # See the https://docs.stackable.tech/home/stable/guides/kubernetes-cluster-domain guide for details.
 # kubernetesClusterDomain: my-cluster.local
@@ -100,7 +129,7 @@ affinity: {}
 kubeletDir: /var/lib/kubelet
 
 # Options: none, stable-nodes, ephemeral-nodes
-# none: No ListenerClasses are preinstalled, the administrator must supply them themself
+# none: No ListenerClasses are preinstalled, administrators must supply them themselves
 # stable-nodes: ListenerClasses are preinstalled that are suitable for on-prem/"pet" environments, assuming long-running Nodes but not requiring a LoadBalancer controller
 # ephemeral-nodes: ListenerClasses are preinstalled that are suitable for cloud/"cattle" environments with short-lived nodes, however this requires a LoadBalancer controller to be installed
 preset: stable-nodes

Changes to the resource names

• Deployment testing-listener-operator-deployment has been renamed to testing-listener-operator-csi-provisioner
  • app.kubernetes.io/role label value has changed from controller to provisioner
  • Container listener-operator has been renamed to csi-controller-service
• DaemonSet listener-operator-node-daemonset has been renamed to listener-operator-csi-node-driver
  • app.kubernetes.io/role label value has changed from node to node-driver
  • Container listener-operator has been renamed to csi-node-service

Warning

Generally no action is required, but that depends on whether or not your deployment scripts (eg: Kustomize) or monitoring/alerting system depends on any of the names and values.

--- nightly.yaml	2025-09-10 17:47:52.077555228 +0200
+++ rendy.yaml	2025-09-15 15:07:07.239531634 +0200
@@ -181,11 +181,11 @@
       port: 8443
       targetPort: 8443
 ---
-# Source: listener-operator/templates/node-daemonset.yaml
+# Source: listener-operator/templates/csi-node-driver-daemonset.yaml
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
-  name: testing-listener-operator-node-daemonset
+  name: testing-listener-operator-csi-node-driver
   labels:
     helm.sh/chart: listener-operator-0.0.0-dev
     app.kubernetes.io/name: listener-operator
@@ -196,14 +196,14 @@
 spec:
   selector:
     matchLabels:
-      app.kubernetes.io/role: node
+      app.kubernetes.io/role: node-driver
       app.kubernetes.io/name: listener-operator
       app.kubernetes.io/instance: testing
       stackable.tech/vendor: Stackable
   template:
     metadata:
       labels:
-        app.kubernetes.io/role: node
+        app.kubernetes.io/role: node-driver
         app.kubernetes.io/name: listener-operator
         app.kubernetes.io/instance: testing
         stackable.tech/vendor: Stackable
@@ -212,7 +212,7 @@
       securityContext:
         {}
       containers:
-        - name: listener-operator
+        - name: csi-node-service
           securityContext:
             runAsUser: 0
             seLinuxOptions:
@@ -303,11 +303,11 @@
           hostPath:
             path: /var/lib/kubelet/pods/
 ---
-# Source: listener-operator/templates/controller-deployment.yaml
+# Source: listener-operator/templates/csi-provisioner-deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: testing-listener-operator-deployment
+  name: testing-listener-operator-csi-provisioner
   labels:
     helm.sh/chart: listener-operator-0.0.0-dev
     app.kubernetes.io/name: listener-operator
@@ -318,7 +318,7 @@
 spec:
   selector:
     matchLabels:
-      app.kubernetes.io/role: controller
+      app.kubernetes.io/role: provisioner
       app.kubernetes.io/name: listener-operator
       app.kubernetes.io/instance: testing
       stackable.tech/vendor: Stackable
@@ -327,7 +327,7 @@
       annotations:
         internal.stackable.tech/image: "oci.stackable.tech/sdp/listener-operator:0.0.0-dev"
       labels:
-        app.kubernetes.io/role: controller
+        app.kubernetes.io/role: provisioner
         app.kubernetes.io/name: listener-operator
         app.kubernetes.io/instance: testing
         stackable.tech/vendor: Stackable
@@ -336,7 +336,7 @@
       securityContext:
         {}
       containers:
-        - name: listener-operator
+        - name: csi-controller-service
           securityContext:
             runAsUser: 0
             seLinuxOptions:
@@ -344,7 +344,6 @@
           image: "oci.stackable.tech/sdp/listener-operator:0.0.0-dev"
           imagePullPolicy: IfNotPresent
           resources:
-            
             limits:
               cpu: 100m
               memory: 128Mi

[NickLarsenNZ]

Release Notes

Refer to: stackabletech/issues#763 (comment)