Create a CTE Policy for Kubernetes
For the generic instructions on how to create a CTE policy, see Protecting Kubernetes Clients.
Specifically, when creating a policy for protecting Persistent Volumes in CTE for Kubernetes:
-
Create a policy with type: CTE for Kubernetes.
-
For the CTE CSI policy name, use the name listed for the policy parameter:
csi.cte.cpl.thalesgroup.com/policy
in thecte-csi-claim.yaml
file. -
Make the GuardPolicy name the same name as the CSI policy.
-
Attach this GuardPolicy to the K8s Storage Group.
Note
CTE for Kubernetes only supports User Sets with a UID and GID. User names and Group names are not supported.