You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| <divstyle="text-align: left"> Ability to set storage quota limits to ensure k8s tenants are not overconsuming storage | No | Yes | Yes | Yes |
23
-
| <divstyle="text-align: left"> Ability to create access control policies to ensure k8s tenant clusters are not accessing storage that does not belong to them | No | Yes | Yes | Yes |
24
-
| <divstyle="text-align: left"> Ability to shield storage credentials from Kubernetes administrators by storing them in vault | Yes | Yes | Yes | Yes |
25
-
| <divstyle="text-align: left"> Ability to create snapshots from owned volumes that consume the storage quota | Yes | Yes | Yes | Yes |
26
-
| <divstyle="text-align: left"> Ability to periodically query storage array to keep quota consumption in sync | No | Yes | Yes | Yes |
| <divstyle="text-align: left"> Shield storage credentials from Kubernetes administrators by storing them in vault | ✅ | ✅ | ✅ | ✅ |
23
+
| <divstyle="text-align: left"> Set storage quota limits to ensure k8s tenants are not overconsuming storage | ✅ | ❌ | ✅ | ✅ |
24
+
| <divstyle="text-align: left"> Access control policies ensure k8s tenant clusters are not accessing storage that does not belong to them | ✅ | ❌ | ✅ | ✅ |
25
+
| <divstyle="text-align: left"> Create snapshots from owned volumes that consume the storage quota | ✅ | ❌ | ✅ | ✅ |
27
26
{{</table>}}
28
27
29
28
### Snapshot Support
@@ -41,7 +40,7 @@ spec:
41
40
persistentVolumeClaimName: vol1
42
41
```
43
42
44
-
This will take a snapshot of the `persistent volume claim` named `vol1`. Container Storage Modules Authorization will verify ownership with Redis to ensure that the tenant who is attempting to create the snapshot owns the `vol1` volume. If the tenant does own the volume, authorization will proceed to check to see if the snapshot fits within the allotted quota and add a record if it does.
43
+
This will take a snapshot of the `PersistentVolumeClaim` named `vol1`. Container Storage Modules Authorization will verify ownership with Redis to ensure that the tenant who is attempting to create the snapshot owns the `vol1` volume. If the tenant does own the volume, authorization will proceed to check to see if the snapshot fits within the allowed quota and add a record if it does.
0 commit comments