Persistent volume isolation in Openshift
Issue
-
At present anyone can mount nfs volumes of each project and that is a problem: we don't want that people of a project can read the data of other projects. For eg:
One can populate persistent volumes as cluster admin and then the users claim these ones and the users of other project directly mount a NFS resource. -
How to achieve project volume isolation in Openshift.
Environment
- Openshift Container Platform 3.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.