Skip to content

Commit f9cc0ce

Browse files
authored
Merge pull request #90693 from openshift-cherrypick-robot/cherry-pick-90251-to-enterprise-4.16
[enterprise-4.16] OCPBUGS-49725#Add info on how to define subnet/ip access restrictions…
2 parents c0f6ab5 + 847b1b5 commit f9cc0ce

File tree

1 file changed

+9
-4
lines changed

1 file changed

+9
-4
lines changed

modules/persistent-storage-csi-manila-dynamic-provisioning.adoc

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,11 @@ The YAML files that are created are completely decoupled from Manila and from it
1212

1313
You can use the same pod and persistent volume claim (PVC) definitions on-premise that you use with {product-title} on AWS, GCP, Azure, and other platforms, with the exception of the storage class reference in the PVC definition.
1414

15+
[IMPORTANT]
16+
====
17+
By default the access-rule assigned to a volume is set to 0.0.0.0/0. To limit the clients that can mount the persistent volume (PV), create a new storage class with an IP or a subnet mask in the `nfs-shareClient` storage class parameter.
18+
====
19+
1520
[NOTE]
1621
====
1722
Manila service is optional. If the service is not enabled in {rh-openstack-first}, the Manila CSI driver is not installed and the storage classes for Manila are not created.
@@ -39,12 +44,12 @@ To dynamically create a Manila CSI volume using the web console:
3944
+
4045
[IMPORTANT]
4146
====
42-
Use RWX if you want the persistent volume (PV) that fulfills this PVC to be mounted to multiple pods on multiple nodes in the cluster.
47+
Use RWX if you want the PV that fulfills this PVC to be mounted to multiple pods on multiple nodes in the cluster.
4348
====
4449

4550
. Define the size of the storage claim.
4651

47-
. Click *Create* to create the persistent volume claim and generate a persistent volume.
52+
. Click *Create* to create the PVC and generate a PV.
4853

4954
.Procedure (CLI)
5055

@@ -69,9 +74,9 @@ spec:
6974
storageClassName: csi-manila-gold <2>
7075
----
7176
+
72-
<1> Use RWX if you want the persistent volume (PV) that fulfills this PVC to be mounted to multiple pods on multiple nodes in the cluster.
77+
<1> Use RWX if you want the PV that fulfills this PVC to be mounted to multiple pods on multiple nodes in the cluster.
7378
<2> The name of the storage class that provisions the storage back end. Manila storage classes are provisioned by the Operator and have the `csi-manila-` prefix.
74-
+
79+
7580
. Create the object you saved in the previous step by running the following command:
7681
+
7782
[source,terminal]

0 commit comments

Comments
 (0)