Storage and object storage
Provide block, shared, and S3-compatible storage through standard Kubernetes APIs.
Kube-DC uses Ceph on your hardware for its storage layer. The platform team defines storage classes, topology, and replication. Tenants request storage through Kubernetes APIs within their assigned quotas.
Block storage
- PersistentVolumes for containers and disks for VMs from a replicated Ceph RBD pool.
- Online volume expansion.
- Storage classes are operator-defined: you decide which tiers exist (replicated, node-local, performance) and what backs them — the platform runs on the disks and failure domains you give it.
Shared (read-write-many) storage
Operator-defined RWX storage classes serve the cases single-writer volumes can't — each with the access mode and backend appropriate to its semantics:
- Multi-pod shared filesystems — several pods writing the same volume (content stores, shared uploads, legacy apps that expect a shared disk).
- Migration-eligible VM disks — a VM whose disk is on the shared block class is eligible for live migration between hosts (see the Virtual Machines datasheet).
S3-compatible object storage
- Per-project buckets provisioned through a standard
ObjectBucketClaim— credentials arrive as a Secret and ConfigMap the workload mounts; no manual account management. - The platform's own services use the same storage: database backups and managed-cluster snapshots land in per-project buckets.
- Typical tenant uses: application assets, exports, log archives, backup targets.
Snapshots, clones and images
- Volume snapshots through the standard Kubernetes snapshot API — point-in-time copies of workload and VM volumes.
- Instant clones: new volumes from snapshots without duplicating data — the mechanism behind the prepared-OS-image catalog and VM provisioning without image downloads.
- Prepared images are published per project as snapshots.
Capacity and quota
Storage consumption counts against organization plans and project quotas like CPU and memory. Object-storage capacity is governed per organization and requires its own capacity planning. How many disks, which tiers, what replication — these are platform-team decisions made against your hardware; capacity and durability are properties of the topology your team designs, validated in the architecture review.
Data protection posture
Storage replication protects against component failure within the platform; it is not a backup. The protection stack is layered:
| Layer | Mechanism | Owner |
|---|---|---|
| Component failure | Ceph replication per your topology | Platform team |
| Point-in-time copies | Scheduled jobs run by platform controllers; on-demand snapshots and restores initiated by tenants | Shared |
| Site/storage loss | Copied by your configured enterprise backup integration via S3 endpoints | Your backup team |
Responsibilities
| Concern | Your platform team | Tenant |
|---|---|---|
| Disks, tiers, replication, failure domains | ✅ | — |
| Storage classes and quotas | ✅ defines | consumes within quota |
| Volume/bucket provisioning | Automatic via API | ✅ requests |
| Snapshots and clones | APIs provided | ✅ initiates |
| Backup of application data | S3 + snapshot APIs provided | ✅ owns |