필사 모드: Synology NAS를 쿠버네티스 동적 PVC 백엔드로 — csi-driver-nfs로 5노드 홈랩에 RWX 스토리지 붙이기

No resources found

for p in 111 2049 445 139 3260 5000 5001 8080 443; do
  timeout 2 bash -c "echo >/dev/tcp/10.0.0.109/$p" 2>/dev/null && echo "  $p open"
done

  111 open    ← rpcbind (NFS 필수)
  2049 open   ← NFS
  445 open    ← SMB
  139 open    ← NetBIOS
  3260 open   ← iSCSI
  5001 open   ← ?

$ showmount -e 10.0.0.109
Export list for 10.0.0.109:
/volume1/k8s     *
/volume1/Public  10.0.0.1/24
/volume1/media  192.168.0.1/24,10.0.0.152

mount.nfs: Operation not permitted for 10.0.0.109:/volume1/k8s on /mnt/t
mount: permission denied (are you root?)

apiVersion: v1
kind: Pod
metadata: { name: nfs-probe }
spec:
  restartPolicy: Never
  hostNetwork: true                      # ← 이것이 빠져 있었다
  containers:
    - name: p
      image: alpine:3.20
      securityContext: { privileged: true }
      command: ["sh","-c"]
      args:
        - |
          apk add -q nfs-utils
          for v in 3 4 4.1; do
            mkdir -p /mnt/t$v
            if mount -t nfs -o nfsvers=$v,nolock 10.0.0.109:/volume1/k8s /mnt/t$v; then
              echo "v$v MOUNT_OK"
              touch /mnt/t$v/.wtest && echo "v$v WRITE_OK" && rm -f /mnt/t$v/.wtest
              umount /mnt/t$v
            fi
          done

v3 MOUNT_OK
v3 WRITE_OK
v4 MOUNT_OK
v4 WRITE_OK
v4.1 MOUNT_OK
v4.1 WRITE_OK

helm repo add csi-driver-nfs \
  https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
helm repo update

helm install csi-driver-nfs csi-driver-nfs/csi-driver-nfs \
  --version 4.13.4 \
  --namespace kube-system \
  --set controller.replicas=1 \
  --set externalSnapshotter.enabled=true

deployment "csi-nfs-controller" successfully rolled out
daemon set "csi-nfs-node" successfully rolled out

csi-nfs-controller-78d6b5bf6f-hxw4g   5/5   Running
csi-nfs-node-2w9dp                    3/3   Running
csi-nfs-node-d6t2k                    3/3   Running
csi-nfs-node-k7lmc                    3/3   Running
csi-nfs-node-lckg2                    3/3   Running
csi-nfs-node-whhnz                    3/3   Running

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: nfs-synology
  annotations:
    storageclass.kubernetes.io/is-default-class: "true"
provisioner: nfs.csi.k8s.io
parameters:
  server: 10.0.0.109
  share: /volume1/k8s
  subDir: ${pvc.metadata.namespace}-${pvc.metadata.name}-${pv.metadata.name}
  onDelete: archive
reclaimPolicy: Delete
volumeBindingMode: Immediate
allowVolumeExpansion: true
mountOptions:
  - nfsvers=4.1
  - hard
  - nconnect=4
  - noatime

metadata:
  name: nfs-synology-retain
parameters:
  onDelete: retain
reclaimPolicy: Retain

NAME                     PROVISIONER      RECLAIMPOLICY   ALLOWVOLUMEEXPANSION
nfs-synology (default)   nfs.csi.k8s.io   Delete          true
nfs-synology-retain      nfs.csi.k8s.io   Retain          true

apiVersion: v1
kind: PersistentVolumeClaim
metadata: { name: test-pvc }
spec:
  accessModes: [ReadWriteMany]
  resources: { requests: { storage: 2Gi } }

NAME       STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS
test-pvc   Bound    pvc-da6bb53d-766c-43ef-9fbd-feb3e6d6fba5   2Gi        RWX            nfs-synology

spec:
  nodeSelector: { kubernetes.io/hostname: gpu-a }
  containers:
    - name: w
      command: ["sh","-c","echo \"gpu-a이 쓴 데이터 $(date -Is)\" > /data/hello.txt && sleep 300"]

spec:
  nodeSelector: { kubernetes.io/hostname: gpu-c }

=== gpu-a이 쓴 내용 ===
gpu-a이 쓴 데이터 2026-08-19T10:23:21+00:00

=== gpu-c에서 읽은 내용 (RWX 검증) ===
gpu-a이 쓴 데이터 2026-08-19T10:23:21+00:00

=== gpu-c에서 쓰기 ===
gpu-a이 쓴 데이터 2026-08-19T10:23:21+00:00
gpu-c도-씁니다

=== 파드 배치 ===
reader Running gpu-c
writer Running gpu-a

drwxr-xr-x  2 root root 4096 Aug 19 10:23 pvc-test-test-pvc-pvc-da6bb53d-766c-43ef-9fbd-feb3e6d6fba5

11.7G  archived-legacy-monitoring-opensearch-cluster-master-...-2-pvc-e480bde4-...
10.1G  archived-legacy-monitoring-opensearch-cluster-master-...-1-pvc-ded61eb8-...
 4.2G  archived-legacy-monitoring-opensearch-cluster-master-...-2-pvc-be60de69-...
 3.2G  legacy-monitoring-prometheus-...-prometheus-2-pvc-7a69f80c-...
 3.2G  legacy-monitoring-prometheus-...-prometheus-1-pvc-d18dca32-...
 3.1G  legacy-monitoring-prometheus-...-prometheus-0-pvc-5f1f07ed-...

Filesystem   Size   Used  Avail  Use%
             19.9T  9.4T  10.5T   47%