--- name: openshift-storage-file-vpc-install title: Enabling the IBM Cloud File Storage for VPC cluster add-on description: IBM Cloud File Storage for VPC is persistent, fast, and flexible network-attached, NFS-based File Storage for VPC that you can add to your apps by using Kubernetes persistent volumes claims (PVCs). last-updated: 2026-08-06 --- > ## Documentation Index > The table of contents for this documentation set is at https://cloud.ibm.com/docs/openshift?format=markdown > The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt > Use these files to discover more information as needed. # Enabling the IBM Cloud File Storage for VPC cluster add-on {: #storage-file-vpc-install} [Virtual Private Cloud]{: tag-vpc} IBM Cloud File Storage for VPC is persistent, fast, and flexible network-attached, NFS-based File Storage for VPC that you can add to your apps by using Kubernetes persistent volumes claims (PVCs). {: shortdesc} You can choose between predefined storage classes that meet the GB sizes and IOPS that meet the requirements of your workloads. To find out if File Storage for VPC is the correct storage option for you, see [Choosing a storage solution](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-plan&format=markdown). For pricing information, see [Pricing](https://cloud.ibm.com/infrastructure/provision/fileShare){: external}. File Storage for VPC is considered to be a Financial Services Validated service only when encryption-in-transit is enabled. For more information, see [what is a Financial Services Validated service](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-faqs-framework&format=markdown#financial-services-validated). {: important} ## Considerations {: #file-vpc-addon-considerations} - It is recommended that your cluster and VPC are part of same resource group. If your cluster and VPC are in separate resource groups, then before you can provision file shares, you must create your own storage class and provide your VPC resource group ID. For more information, see [Creating your own storage class](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-apps&format=markdown#storage-file-vpc-custom-sc). - New security group rules were introduced in cluster versions 4.11 and later. These rule changes mean that you must sync your security groups before you can use File Storage for VPC. For more information, see [Adding File Storage for VPC to apps](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-apps&format=markdown). - New storage classes were added with version 2.0 of the add-on. You can no longer provision new file shares that use the older storage classes. Existing volumes that use the older storage classes continue to function, however you cannot expand the volumes that were created using the older classes. For more information, see the [Migrating to a new storage class](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-apps&format=markdown#storage-file-expansion-migration). - The add-on is managed by the `addon-vpc-file-csi-driver-configmap` configmap in the `kube-system` namespace. File storage events are published in the `file-csi-driver-status` configmap in the `kube-system` namespace. For Red Hat OpenShift on IBM Cloud 4.17, these two configmaps are retained even when the add-on is disabled. Which means, whenever the add-on is enabled again, the values set by the user in add-on configmap are reapplied. - Encryption in-transit is disabled by default. You can optionally enable encryption in-transit when you enable the add-on. - Regional file shares (`rfs` profile) and encryption in transit for regional file shares are both available as **Beta** features for allowlisted accounts only. Beta features are intended for experimental use and are **not recommended for production workloads**. If you see `'rfs' profile is not accessible` in your PVC events, [open a VPC support ticket](https://cloud.ibm.com/unifiedsupport/cases/add){: external} to request access. For more information, see [Regional file shares overview](https://cloud.ibm.com/docs/vpc?topic=vpc-file-storage-vpc-about&format=markdown#regional-file-storage-overview) and [Encryption in transit for IBM Cloud File Storage for VPC](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-eit&format=markdown). {: important} Need to update the add-on to a newer version? See [Updating the File Storage for VPC add-on](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-managing&format=markdown#storage-file-vpc-update) {: tip} ## Enabling the add-on {: #file-vpc-addon-enable} 1. Update the Cloud CLI and the `container-service` plug-in. ```shell ibmcloud update && ibmcloud plugin update container-service ``` {: pre} 1. Get a list of the add-on versions and decide which version to install for your cluster version. ```sh ibmcloud oc cluster addon versions --addon vpc-file-csi-driver ``` {: pre} Example output ```sh Name Version Supported Kubernetes Range Supported OpenShift Range Kubernetes Default OpenShift Default vpc-file-csi-driver 2.0 (default) >=1.30.0 >=4.15.0 - - ``` {: pre} 1. Enable the add-on and follow the prompts to install any dependencies. Version 2.0 is recommended. ```sh ibmcloud oc cluster addon enable vpc-file-csi-driver --version 2.0 --cluster CLUSTER ``` {: pre} Example output ```sh Enabling add-on vpc-file-csi-driver(2.0) for cluster devcluster2... The add-on might take several minutes to deploy and become ready for use. The ibm-storage-operator add-on version 1.0 is required to enable the vpc-file-csi-driver add-on. Enable ibm-storage-operator? [y/N]> y ``` {: screen} Example prompt to install dependencies. ```sh The ibm-storage-operator add-on version 1.0 is required to enable the vpc-file-csi-driver add-on. Enable ibm-storage-operator? [y/N]> y ``` {: pre} 1. Verify that the add-on is enabled. ```sh ibmcloud oc cluster addon ls --cluster CLUSTER_NAME_OR_ID ``` {: pre} Example output ```sh Name Version Health State Health Status ibm-storage-operator 1.0 normal Addon Ready. For more info: http://ibm.biz/addon-state (H1500) vpc-file-csi-driver 2.0 normal Addon Ready. For more info: http://ibm.biz/addon-state (H1500) ``` {: pre} ## Next steps {: #vpc-enable-next-steps} Review the following links to continue setting up File Storage for VPC. - [Quick start for File Storage for VPC](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-apps&format=markdown#vpc-add-file-dynamic) - [Adding File Storage for VPC to apps](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-apps&format=markdown). - [Managing File Storage for VPC](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-managing&format=markdown). - [Creating your own storage class](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-apps&format=markdown#storage-file-vpc-custom-sc). - [File Storage for VPC storage class reference](https://cloud.ibm.com/docs/openshift?topic=openshift-storage-file-vpc-sc-ref&format=markdown). ## Assigning trusted profiles to file storage {: #file-vpc-trustedprofile} You can use trusted profiles to grant different IBM Cloud identities access to resources in your account, including your storage solutions. Trusted profiles centralize access control, eliminate the need for long-lived API keys, and allow you to scope permissions to the exact minimum required for a specific task. For more information, see [Configuring a trusted profile for storage components](https://cloud.ibm.com/docs/containers?topic=containers-configure-trusted-profile&interface=ui&format=markdown).