Chapter 23. Configuring Persistent Volume Claim Protection

23.1. Overview

OpenShift Container Platform can be configured to have the persistent volume claim (PVC) protection feature enabled. This feature ensures that PVCs in active use by a pod are not removed from the system, as this may result in data loss.

Note

PVC protection is an alpha feature and may change in a future release of OpenShift Container Platform.

23.1.1. Enable PVC Protection

To enable the PVCProtection feature gate on all masters and nodes:

  1. Edit or create the master configuration file on all masters (/etc/origin/master/master-config.yaml by default):

    1. Add PVCProtection=true under the apiServerArguments and controllerArguments sections.

    2. Add PVCProtection admission plugin configuration under the admissionConfig section. 

      admissionConfig:
  pluginConfig:
    PVCProtection:
      configuration:
        apiVersion: v1
        disable: false
        kind: DefaultAdmissionConfig
...
kubernetesMasterConfig:
...
  apiServerArguments:
    feature-gates:
    - PVCProtection=true
...
  controllerArguments:
    feature-gates:
    - PVCProtection=true
...

  2. On all nodes, edit or create the node configuration file (/etc/origin/node/node-config.yaml by default), and add the PVCProtection=true feature gate under kubeletArguments: 

    kubeletArguments:
  feature-gates:
  - PVCProtection=true
  3. On all masters and nodes, restart OpenShift Container Platform for the changes to take effect.