External access to Rook Ceph

Posted on March 11, 2025

I’ve been able to get Rook Ceph up and running on a DOKS cluster. 3x 2vCPU 4GB nodes. Had to dial back the requested resources to get the base configuration to work, but it seems to be humming along with dozens of pods providing support.

My question though is I’d like to connect my local fedora box to the cephfs that rook ceph manages. I’ve tried a few things but I’m new to this and likely missing a fundamental step. Wireguard, NFS Ganesha, using a Load Balancer, and just connecting directly haven’t worked.

Maybe someone has done this and can share some tips?

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby Iliev

March 14, 2025

Hey there 👋

I haven’t set this up myself end-to-end, but from what I’ve seen, using NFS-Ganesha with a LoadBalancer might work for exposing CephFS externally.

You’d want to make sure your NFS server is listening on TCP port 2049, and then expose that via a LoadBalancer Service. You can find more info in the DOKS LoadBalancer docs here: 👉 https://docs.digitalocean.com/products/kubernetes/how-to/add-load-balancers/

On another note, a more reliable workaround could be to set up WireGuard or Tailscale, so your local machine can securely connect to the cluster’s private network without exposing services publicly.

If you’re still stuck, I’d recommend reaching out to the support team here:

👉 https://do.co/support

Hope that helps a bit!

- Bobby