[ceph-users] Re: CephFS keyrings for K8s

2022-01-25 Thread Frédéric Nass
Le 25/01/2022 à 12:09, Frédéric Nass a écrit : Hello Michal, With cephfs and a single filesystem shared across multiple k8s clusters, you should subvolumegroups to limit data exposure. You'll find an example of how to use subvolumegroups in the ceph-csi-cephfs helm chart [1]. Essentially

[ceph-users] Re: CephFS keyrings for K8s

2022-01-25 Thread Frédéric Nass
Hello Michal, With cephfs and a single filesystem shared across multiple k8s clusters, you should subvolumegroups to limit data exposure. You'll find an example of how to use subvolumegroups in the ceph-csi-cephfs helm chart [1]. Essentially you just have to set the subvolumeGroup to whatever

[ceph-users] Re: CephFS keyrings for K8s

2022-01-20 Thread Burkhard Linke
Hi, On 1/20/22 9:26 AM, Michal Strnad wrote: Hi, We are using CephFS in our Kubernetes clusters and now we are trying to optimize permissions/caps in keyrings. Every guide which we found contains something like - Create the file system by specifying the desired settings for the metadata

[ceph-users] Re: CephFS keyrings for K8s

2022-01-20 Thread Michal Strnad
Ad. We are using Nautilus on Ceph side. Michal Strnad On 1/20/22 9:26 AM, Michal Strnad wrote: Hi, We are using CephFS in our Kubernetes clusters and now we are trying to optimize permissions/caps in keyrings. Every guide which we found contains something like - Create the file system by