Support setting export rules on flashblade
Closed this issue · 7 comments
The orchestrator creates the volume with a blank ... (rw,no_root_squash) on the volume. Would be good if we could limit this to our k8s subnets.
Could you please elaborate ?
I would like to have the pure container that creates the flashblade volume, and the sets the NFS export, also put an access list on the volume. Right now, it allows anyone, anywhere, to mount the share read/write. For example, it would be great if I could provide these values overrides for the helm chart:
flashblade: snapshotDirectoryEnabled: "false" exports: ipRange: "192.168.74.0/24" options: "rw, no_root_squash"
Got it.
Thanks !
@justinrush Great comments and I support this request, however as this is actually a feature request and not a bug we will need you to reach out to your local Pure SE and tell them what you want. Also, get them to directly contact me and @taherv so we can help the process along.
@justinrush This has been added to the PSO roadmap and should be available later this year.
We made the exact same request to our SE today. Thanks.
This feature is included in PSO v6.0.0 which will ship in the next month