added mount path /run/cryptsetup to fix the permission issue with cryptsetup operation.

For this, when the backend volume is an iSCSI connection and of encryption type, /run/cryptsetup must be mounted.

Closes-Bug: #2087913
Change-Id: I806f24c21395a2bcf74e8df48f172dc6a3adb5f7

cinder/Chart.yaml

@@ -14,7 +14,7 @@ apiVersion: v1
 appVersion: v1.0.0
 description: OpenStack-Helm Cinder
 name: cinder
-version: 0.3.25
+version: 0.3.26
 home: https://docs.openstack.org/cinder/latest/
 icon: https://www.openstack.org/themes/openstack/images/project-mascots/Cinder/OpenStack_Project_Cinder_vertical.png
 sources:

cinder/templates/deployment-backup.yaml

@@ -270,6 +270,8 @@ spec:
               {{- if or ( gt .Capabilities.KubeVersion.Major "1" ) ( ge .Capabilities.KubeVersion.Minor "10" ) }}
               mountPropagation: HostToContainer
               {{- end }}
+            - name: runcryptsetup
+              mountPath: /run/cryptsetup
             - name: runlock
               mountPath: /run/lock
             - name: etciscsi
@@ -352,6 +354,9 @@ spec:
         - name: host-dev
           hostPath:
             path: /dev
+        - name: runcryptsetup
+          hostPath:
+            path: /run/cryptsetup
         - name: runlock
           hostPath:
             path: /run/lock

cinder/templates/deployment-volume.yaml

@@ -253,6 +253,8 @@ spec:
               {{- if or ( gt .Capabilities.KubeVersion.Major "1" ) ( ge .Capabilities.KubeVersion.Minor "10" ) }}
               mountPropagation: HostToContainer
               {{- end }}
+            - name: runcryptsetup
+              mountPath: /run/cryptsetup
             - name: runlock
               mountPath: /run/lock
             - name: etciscsi
@@ -336,6 +338,9 @@ spec:
         - name: host-dev
           hostPath:
             path: /dev
+        - name: runcryptsetup
+          hostPath:
+            path: /run/cryptsetup
         - name: runlock
           hostPath:
             path: /run/lock

releasenotes/notes/cinder.yaml

@@ -75,4 +75,5 @@ cinder:
   - 0.3.23 Use quay.io/airshipit/kubernetes-entrypoint:latest-ubuntu_focal by default
   - 0.3.24 Fix volume type create to allow encrypt volume type
   - 0.3.25 Add 2024.2 Ubuntu Jammy overrides
+  - 0.3.26 Mount /run/cryptsetup in cinder-volume container
 ...