Fix CSI node bind mount and publish to correct image registry.

Use k8s mount-utils for bind mounts so the pod target directory is created
before mounting, and push CI images to ghcr.io/kubelancloud/kks-csi-plugin
to match the deployed chart.

Co-authored-by: Cursor <cursoragent@cursor.com>

charts/kloud-csi/templates/rbac-controller.yaml

@@ -39,6 +39,9 @@ rules:
   - apiGroups: ["storage.k8s.io"]
     resources: ["volumeattachments/status"]
     verbs: ["patch"]
+  - apiGroups: ["storage.k8s.io"]
+    resources: ["csinodes"]
+    verbs: ["get", "list", "watch"]
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
     verbs: ["get", "watch", "list", "create", "update", "patch"]

charts/kloud-csi/values.yaml

@@ -16,7 +16,7 @@ fullnameOverride: ""
 image:
   repository: ghcr.io/kubelancloud/kks-csi-plugin
   tag: "latest"
-  pullPolicy: IfNotPresent
+  pullPolicy: Always
 
 imagePullSecrets: []