AKS 存储类网络访问控制列表是一种控制 Kubernetes AKS 集群中存储资源访问的方法。用户可以通过创建 Kubernetes Service 及其访问方式来指定网络 ACL 权限。使用此方法需要按照以下步骤进行操作:
创建存储资源的 AKS Storage Class。
创建 Service,并选择 AKS Storage Class 作为其存储。示例如下所示:
apiVersion: v1
kind: Service
metadata:
name: my-service
spec:
selector:
app: my-app
ports:
- name: http
port: 80
targetPort: 9376
volumeMounts:
- name: my-volume
mountPath: /usr/share/nginx/html
volumeClaimTemplates:
- metadata:
name: my-volume
spec:
accessModes: [ "ReadWriteOnce" ]
storageClassName:
resources:
requests:
storage: 1Gi
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: my-networkpolicy
spec:
podSelector:
matchLabels:
app: my-app
policyTypes:
- Ingress
ingress:
- from:
- podSelector:
matchLabels:
app: my-app-2
ports:
- port: 80