Volume ID validation issue when used with manila-csi

[Kajot-dev]

Describe the bug

When using ceph-csi along with manila-csi from cloud-provider-openstack. The volumeHandle generated by manila csi has format like 1a0b5619-f55f-4724-8a7f-c84659ba606a and it does NOT pass the validation introduced in #5957 which requires 0000-0000- (2 groups by 4 chars at the start)

This causes every mount to fail

Environment details

• Image/version of Ceph CSI driver : 3.16.1+ (3.16.2, 3.17.0 are affected)
• Helm chart version : 3.16.1+ (3.16.2, 3.17.0 are affected)
• Kernel version : Not relevant
• Mounter used for mounting PVC (for cephFS its fuse or kernel. for rbd its
  krbd or rbd-nbd) : kernel
• Kubernetes cluster version : OKD 4.21 on Openstack
• Ceph cluster version : Not relevant

Steps to reproduce

Install ceph-csi-cephfs 3.16.1+ along with manila-csi and try to mount the volume. 3.16.0 works without issues.

Actual results

Volume does not mount because of faulty ID check

Expected behavior

Volume does mount correctly.

[Madhu-1]

@Kajot-dev we added that check to fix a bug that no one exploit the volumeId. am still not getting the issue here, are you using ceph-csi to mount the volume created by the manilla-csi driver?

[Kajot-dev]

@Madhu-1 Yes, exactly that is the primary use case of the manila-csi driver. It always does require a second driver, in this case ceph-csi driver (but the driver depends on the fs backing manila, can be nfs or cephfs). See the https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs%2Fmanila-csi-plugin%2Fusing-manila-csi-plugin.md (Share protocol support matrix).

[Madhu-1]

Is the PV marked as static? can you please share the pv output and the logs from the csi-rbdplugin container where you are seeing the error?

[Kajot-dev]

There is no csi-rbdplugin, cince its not ceph rbd, but cephfs. and the pvc is dynamically provisioning. However I do not know if manila-csi plugin does not preProvision it via manila API in Openstack. It might be the same bug.

Here is an example PV:

kind: PersistentVolume
apiVersion: v1
metadata:
  name: pvc-1a9d955c-03d9-48a7-83b2-7f548ecaae4a
  uid: 92070cdf-8a60-4e26-81a4-1199adcee19a
  resourceVersion: '2205208966'
  creationTimestamp: '2026-03-24T08:53:28Z'
  annotations:
    pv.kubernetes.io/provisioned-by: cephfs.manila-cephfs.csi.openstack.org
    volume.kubernetes.io/provisioner-deletion-secret-name: csi-manila-secrets
    volume.kubernetes.io/provisioner-deletion-secret-namespace: openshift-manila-csi-driver
  finalizers:
    - external-provisioner.volume.kubernetes.io/finalizer
    - kubernetes.io/pv-protection
  managedFields:
    - manager: csi-provisioner
      operation: Update
      apiVersion: v1
      time: '2026-03-24T08:53:28Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            .: {}
            'f:pv.kubernetes.io/provisioned-by': {}
            'f:volume.kubernetes.io/provisioner-deletion-secret-name': {}
            'f:volume.kubernetes.io/provisioner-deletion-secret-namespace': {}
          'f:finalizers':
            .: {}
            'v:"external-provisioner.volume.kubernetes.io/finalizer"': {}
        'f:spec':
          'f:accessModes': {}
          'f:capacity':
            .: {}
            'f:storage': {}
          'f:claimRef':
            .: {}
            'f:apiVersion': {}
            'f:kind': {}
            'f:name': {}
            'f:namespace': {}
            'f:resourceVersion': {}
            'f:uid': {}
          'f:csi':
            .: {}
            'f:controllerExpandSecretRef': {}
            'f:driver': {}
            'f:nodePublishSecretRef': {}
            'f:nodeStageSecretRef': {}
            'f:volumeAttributes':
              .: {}
              'f:cephfs-fuseMountOptions': {}
              'f:cephfs-kernelMountOptions': {}
              'f:cephfs-mounter': {}
              'f:shareAccessID': {}
              'f:shareID': {}
              'f:storage.kubernetes.io/csiProvisionerIdentity': {}
            'f:volumeHandle': {}
          'f:persistentVolumeReclaimPolicy': {}
          'f:storageClassName': {}
          'f:volumeMode': {}
    - manager: kube-controller-manager
      operation: Update
      apiVersion: v1
      time: '2026-03-24T08:53:28Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:status':
          'f:phase': {}
      subresource: status
spec:
  capacity:
    storage: 10Gi
  csi:
    driver: cephfs.manila-cephfs.csi.openstack.org
    volumeHandle: 687a518e-66d9-466a-ac34-bd76b7785eb6
    volumeAttributes:
      cephfs-fuseMountOptions: fs=klaudia_manila_cephfs_vol
      cephfs-kernelMountOptions: fs=klaudia_manila_cephfs_vol
      cephfs-mounter: kernel
      shareAccessID: 180c606b-694f-417d-9a38-a90dd365d278
      shareID: 687a518e-66d9-466a-ac34-bd76b7785eb6
      storage.kubernetes.io/csiProvisionerIdentity: 1772467815213-2715-cephfs.manila-cephfs.csi.openstack.org
    nodeStageSecretRef:
      name: csi-manila-secrets
      namespace: openshift-manila-csi-driver
    nodePublishSecretRef:
      name: csi-manila-secrets
      namespace: openshift-manila-csi-driver
    controllerExpandSecretRef:
      name: csi-manila-secrets
      namespace: openshift-manila-csi-driver
  accessModes:
    - ReadWriteOnce
  claimRef:
    kind: PersistentVolumeClaim
    namespace: openshift-psnc-monitoring-storage-performance
    name: manila-share-fio
    uid: 1a9d955c-03d9-48a7-83b2-7f548ecaae4a
    apiVersion: v1
    resourceVersion: '2205208718'
  persistentVolumeReclaimPolicy: Delete
  storageClassName: manila-share
  volumeMode: Filesystem
status:
  phase: Bound
  lastPhaseTransitionTime: '2026-03-24T08:53:28Z'

The volumeHandle is being passed to the cephfs and it begins with 687a518e- thus fails the validation

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in a week if no further activity occurs. Thank you for your contributions.