Skip to content

Commit f89fffd

Browse files
dobsonjTim Bannister
andcommitted
CSI Inline Volumes: apply suggestions from code review
Co-authored-by: Tim Bannister <[email protected]>
1 parent 53c6ce9 commit f89fffd

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

content/en/blog/_posts/2022-08-29-csi-inline-volumes-ga.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -72,11 +72,11 @@ spec:
7272
driver: hostpath.csi.k8s.io
7373
```
7474

75-
If the driver supports any volume attributes, these may also be provided as part of the pod spec.
75+
If the driver supports any volume attributes, you can provide these as part of the `spec` for the Pod as well:
7676

7777
```
7878
csi:
79-
driver: example.csi.k8s.io
79+
driver: block.csi.vendor.example
8080
volumeAttributes:
8181
foo: bar
8282
```
@@ -93,7 +93,7 @@ The [Cert-Manager CSI Driver](https://github.com/cert-manager/csi-driver) works
9393

9494
Special consideration should be given to which CSI drivers may be used as inline volumes. `volumeAttributes` are typically controlled through the `StorageClass`, and may contain attributes that should remain restricted to the cluster administrator. Allowing a CSI driver to be used for inline ephmeral volumes means that any user with permission to create pods may also provide `volumeAttributes` to the driver through a pod spec.
9595

96-
Cluster administrators may choose to remove `Ephemeral` from `volumeLifecycleModes` in the CSIDriver spec to prevent the driver from being used as an inline ephemeral volume, or use an [admission webhook](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/) to restrict how the driver is used.
96+
Cluster administrators may choose to omit (or remove) `Ephemeral` from `volumeLifecycleModes` in the CSIDriver spec to prevent the driver from being used as an inline ephemeral volume, or use an [admission webhook](/docs/reference/access-authn-authz/extensible-admission-controllers/) to restrict how the driver is used.
9797

9898
## References
9999

0 commit comments

Comments
 (0)