0

Is there any way to configure k8s so that pre defined nfs exports on some external nfs server , are only available for the pods that belong to a particular name space and other pods in other name spaces cannot mount it.

Ijaz Ahmad
  • 11,198
  • 9
  • 53
  • 73

1 Answers1

0

Unfortunately there is no way to manage access to the NFS share in Kubernetes.

You can limit access by using NFS server with Kerberos.

You can find an example in the NFSv4Howto document.

Akar
  • 574
  • 3
  • 8
  • Hi, do you mean if the shares are restricted to some username then we can configure k8s to to use that username for accessing the share? – Ijaz Ahmad Aug 02 '18 at 08:10
  • Exactly. You can try to use tis client https://github.com/kubernetes-incubator/external-storage/tree/master/nfs-client for example. – Akar Aug 02 '18 at 08:17