Create a CTE Policy for Kubernetes
For the generic instructions on how to create a CTE policy, see Policies
Specifically, when creating a policy for protecting Persistent Volumes in CTE for Kubernetes: CTE for Kubernetes
-
Create a policy with type : CTE for Kubernetes
-
For the CTE CSI policy name, use the name listed for the policy parameter:
csi.cte.cpl.thalesgroup.com/policy
in thecte-csi-claim.yaml
file. -
Make the GuardPolicy name the same name as the CSI policy.
-
Attach this GuardPolicy to the K8s Storage Group.
Note
CTE for Kubernetes only supports User Sets with a UID and GID. User names and Group names are not supported.