Azure / Azure/kubernetes-volume-drivers

Add support for Kubernetes Pod Security Policy

Open
#71 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Shell
Stars
127
Forks
62
Avg merge
1d 23h
Merged PRs (30d)
2

Description

**Is your feature request related to a problem?/Why is this needed**
We run secure Kubernetes 1.16+ environments where Pod Security Policies (PSP) is required for any Pod to start. When we deploy the helm package for the SMB FlexVolume plugin it fails to start

**Describe the solution you'd like in detail**
The helm package includes PSP support, including creating the service account under which the installer pod runs as.

**Describe alternatives you've considered**
Manually create the required Kubernetes definitions to support PSP, including post-installation change to the installer's deployment - however it's more effective to have that supported out of the box.

**Additional context**
See https://kubernetes.io/docs/concepts/policy/pod-security-policy/

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the Helm package and the installer's deployment and service-account definitions. Read the Kubernetes Pod Security Policy documentation linked in the issue, then compare the package's current resources with the requirements for a PSP-enabled cluster. Done means the SMB FlexVolume plugin can be deployed in a Kubernetes 1.16+ environment where PSP is required, without manual resource or deployment changes.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.