kubernetes-sigs / vsphere-csi-driver

vSphere storage Container Storage Interface (CSI) plugin
https://docs.vmware.com/en/VMware-vSphere-Container-Storage-Plug-in/index.html
Apache License 2.0
289 stars 173 forks source link

RWX Volumes with encrypted NFSv4 #2871

Open JoschuaA4 opened 2 months ago

JoschuaA4 commented 2 months ago

/kind feature

What happened: We need support for NFSv4 with encryption of the data channel between client (K8s-Worker) and server (VSAN-FS). This is necessary to fulfill certain legal security standards.
It would be advantageous for VMware customers if the vsphere-csi-driver could take over the distribution of kerberos tickets to the worker nodes. As far as I know, this would also be a unique selling point on the market.

Environment: TKGI 1.18.3 vSphere 7u3