openebs-archive / node-disk-manager

Kubernetes Storage Device Management
https://openebs.io/docs
Apache License 2.0
182 stars 113 forks source link

NDM's privileged-access - security concerns #696

Open rpieczon opened 1 year ago

rpieczon commented 1 year ago

According to documentation https://openebs.io/docs/concepts/ndm#privileged-access, NDM pod needs to be privileged. It has RW access to whole host's filesystem, it brings a risk that compromised container will expose host for attacker. Is there any option to make privileged access limited somehow?