Portworx Documentation has moved to https://docs.portworx.com

Portworx Enterprise version 2.13 has reached end of life and end of extended maintenance. Refer to the release support policy doc here.
Upgrade to the latest version of Portworx Enterprise for continued support. Documentation for the latest version of Portworx Enterprise can be found here.

Overview

Kubernetes provides a great way to isolate account resources using namespaces, but you may want a more secure multitenant solution. Portworx can greatly enhance the multitenant model by providing resource access control for application volumes.

The following reference architecture provides a model where volume access is authenticated using tokens stored in the secret of the namespace of the tenant.

NOTE: This solution is currently supported in CSI only.

Prerequisites

You must be running Portworx version 2.1 or greater on Kubernetes
You must have Operator version 1.4 or greater

Step 1: Enable security in Portworx

Step 2: Generate multitenant tokens

Step 3: Set up the StorageClass

Example application

Multitenancy using namespaces

Overview

Prerequisites