To share mounted storage volumes (e.g., S3) from a sidecar to the main container

[Milstein]

Our goal is to share mounted storage volumes (e.g., S3) from a sidecar to the main container to improve design by separating user workloads into distinct components. This simplifies access, obscures credentials, and provides flexibility for customizing job containers for diverse user needs.

I have a solution using “bidirectional mounting propagation,” but we’re restricted from using “privileged containers” on NERC for our account. I also explored the Meta Fuse CSI plugin, but access to csidrivers at the cluster scope is denied for my user account.

Could you recommend any workarounds or alternatives to address these challenges?

Thank you,
Paul Diehl

[joachimweyl]

@larsks please take a first pass at this.