Overview

OKD can be configured to have the persistent volume claim (PVC) protection feature enabled. This feature ensures that PVCs in active use by a pod are not removed from the system, as this may result in data loss.

PVC protection is an alpha feature and may change in a future release of OKD.

Enable PVC Protection

To enable the PVCProtection feature gate on all masters and nodes:

  1. Edit or create the master configuration file on all masters (/etc/origin/master/master-config.yaml by default):

    1. Add PVCProtection=true under the apiServerArguments and controllerArguments sections.

    2. Add PVCProtection admission plugin configuration under the admissionConfig section.

      admissionConfig:
        pluginConfig:
          PVCProtection:
            configuration:
              apiVersion: v1
              disable: false
              kind: DefaultAdmissionConfig
      ...
      kubernetesMasterConfig:
      ...
        apiServerArguments:
          feature-gates:
          - PVCProtection=true
      ...
        controllerArguments:
          feature-gates:
          - PVCProtection=true
      ...
  2. On all nodes, edit or create the node configuration file (/etc/origin/node/node-config.yaml by default), and add the PVCProtection=true feature gate under kubeletArguments:

    kubeletArguments:
      feature-gates:
      - PVCProtection=true
  3. On all masters and nodes, restart OKD for the changes to take effect.