NFS credentials

[santimar]

Is your feature request related to a problem?/Why is this needed
Right now it seems that this driver can only mount NFS volumes if server allow anonymous access.
2 years ago, on kubernetes-sigs/nfs-subdir-external-provisioner#136 (comment) was said that this feature could have been implemented here but I wasn't able to find anything related.

Describe the solution you'd like in detail
A way to set some kind of credentials to perform authentication (eg Kerberos, sys)

Additional context
none

[viceice]

need this too. on ionos the shared storage uses kerberos 😕

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[NigelVanHattum]

/remove-lifecycle stale

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[santimar]

/remove-lifecycle stale

[BloodyIron]

Yeah can we please get authentication options for NFS for this CSI driver? It's very insecure to expect NFS interfacing without authentication over a network. I'm not even sure where encryption fits into this picture, but I'm more concerned now that I start thinking about that too.

Authentication and security aspects for NFS have been around for about a decade, really need this to be added please!

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[george-angel]

/remove-lifecycle stale

[BloodyIron]

Yeah definitely still interested.