kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Address latest comments

pull/32419/head
Raunak Pradip Shah 2022-05-05 14:57:49 +05:30
parent 9af1df6914
commit 04f00d5566
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
content/en/blog/_posts/2022-05-18-prevent-unauthorised-volume-mode-conversion.md
View File

@ -43,9 +43,9 @@ It is upto the cluster administrator to provide these rights only to trusted use
or applications, like backup vendors. or applications, like backup vendors.
If the alpha feature is [enabled](https://kubernetes-csi.github.io/docs/) in If the alpha feature is [enabled](https://kubernetes-csi.github.io/docs/) in
`snapshot-controller` and `external-provisioner`, then unauthorised users will `snapshot-controller`, `snapshot-validation-webhook` and `external-provisioner`,
not be allowed to modify the volume mode of a PVC when it is being created from then unauthorised users will not be allowed to modify the volume mode of a PVC
a `VolumeSnapshot`. when it is being created from a `VolumeSnapshot`.
To convert the volume mode, an authorised user must do the following: To convert the volume mode, an authorised user must do the following:
@ -98,8 +98,8 @@ spec:
Repeat steps 1 to 3 for all `VolumeSnapshotContents` whose volume mode needs to be Repeat steps 1 to 3 for all `VolumeSnapshotContents` whose volume mode needs to be
converted during a backup or restore operation. converted during a backup or restore operation.
If the above annotation is present on a `VolumeSnapshotContent` object, If the annotation shown in step 4 above is present on a `VolumeSnapshotContent`
Kubernetes will not prevent the volume mode from being converted. object, Kubernetes will not prevent the volume mode from being converted.
Users should keep this in mind before they attempt to add the annotation Users should keep this in mind before they attempt to add the annotation
to any `VolumeSnapshotContent`. to any `VolumeSnapshotContent`.