Enforce read-only access on EFS to pod

Hello, I have two k8s pods accessing the same EFS. One pod writes in the filesystem and the other reads from it. How can I limit the access of the 2nd pod to readonly?

主题

存储容器安全、身份和合规性

标签

亚马逊弹性文件系统 (EFS)亚马逊弹性 Kubernetes 服务 IAM 策略

语言

English

Mehdi

已提问 1 个月前220 查看次数

1 回答

最新
投票最多
评论最多

这些答案有用吗？为正确答案投票，以帮助社区从您的知识中受益。

Two ways you can do it

PVC with ReadOnly Access Mode: Create a separate PVC with accessModes: ["ReadOnly"] for the read-only pod.

https://aws.amazon.com/blogs/storage/persistent-storage-for-kubernetes/ Or 2. Pod Security Policies (PSPs):Enforce Read-Only Mounts: Create a PSP that restricts pods to read-only volume mounts. Annotate Read-Only Pods: Annotate pods requiring read-only access with a designated key-value pair.

https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

专家

已回答 1 个月前

Enforce read-only access on EFS to pod

相关内容