Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosAndroid Police: Samsung is smashing records! #shorts #tech #phones(21.09.2026 um 13:55 Uhr)
YouTube Security Videosheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
YouTube Security VideosNeil Patel: Your Google Traffic Isn't An Asset It's A Loan #shorts(21.09.2026 um 14:05 Uhr)
Windows Tipps & SecurityF-14 A Tomcat Top Gun endlich als Revell Klemmbausteinmodell erhältlich(21.09.2026 um 14:27 Uhr)
Sichere ProgrammierungShow the Hand-Back Sample Before Approving an Agent Score(21.09.2026 um 14:15 Uhr)
Sichere ProgrammierungHybrid retrieval in one Postgres query: RRF over tsvector + pgvector(21.09.2026 um 14:15 Uhr)
YouTube Security VideosAndroid Police: Samsung is smashing records! #shorts #tech #phones(21.09.2026 um 13:55 Uhr)
YouTube Security Videosheise & c't: Bundesnetzagentur wollte diesen Futterautomaten verbieten(21.09.2026 um 13:53 Uhr)
YouTube Security VideosNeil Patel: Your Google Traffic Isn't An Asset It's A Loan #shorts(21.09.2026 um 14:05 Uhr)
Windows Tipps & SecurityF-14 A Tomcat Top Gun endlich als Revell Klemmbausteinmodell erhältlich(21.09.2026 um 14:27 Uhr)
Sichere ProgrammierungShow the Hand-Back Sample Before Approving an Agent Score(21.09.2026 um 14:15 Uhr)
Sichere ProgrammierungHybrid retrieval in one Postgres query: RRF over tsvector + pgvector(21.09.2026 um 14:15 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

AKS RWX Shared Storage Demo

Using Azure Files with Kubernetes (Full Script + Troubleshooting) If you're running workloads on Azure Kubernetes Service and need multiple pods to read and write the same directory, you need: ReadWriteMany (RWX) storage In this…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




Using Azure Files with Kubernetes (Full Script + Troubleshooting)



If you're running workloads on Azure Kubernetes Service and need multiple pods to read and write the same directory, you need:




ReadWriteMany (RWX) storage




In this tutorial, we’ll:




  • Deploy shared storage using Azure Files

  • Mount it in multiple pods

  • Prove cross-pod writes

  • Cover real-world troubleshooting scenarios









Why RWX Matters



By default, many Kubernetes volumes are:




ReadWriteOnce (RWO)






Meaning:




  • Mounted by only one node at a time.



RWX allows:




  • Multiple pods

  • Across different nodes

  • Simultaneous read/write access



Perfect for:




  • WordPress clusters

  • Shared uploads

  • ML distributed training

  • Batch processing

  • CI runners









Architecture Overview






Pods (2 replicas)

PersistentVolumeClaim (RWX)

azurefile-csi StorageClass

Azure File Share














Prerequisites




  • AKS cluster running


  • kubectl configured

  • Azure File CSI driver enabled (default in modern AKS)



Verify:




kubectl get csidrivers






You should see:




file.csi.azure.com






Also confirm storage class:




kubectl get sc






You should see:




azurefile-csi












Full End-to-End Script



Save as:




rwx-demo.sh












#!/bin/bash

set -e

echo "========================================"
echo "AKS RWX Shared Storage Demo"
echo "========================================"

NAMESPACE="rwx-demo"

echo "1️⃣ Creating namespace..."
kubectl create namespace $NAMESPACE || true

echo
"2️⃣ Creating RWX PVC (Azure Files)..."

cat <<EOF | kubectl apply -n $NAMESPACE -f -
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: rwx-demo-pvc
spec:
accessModes:
- ReadWriteMany
storageClassName: azurefile-csi
resources:
requests:
storage: 5Gi
EOF

echo "Waiting for PVC to bind..."

for i in {1..30}; do
STATUS=$(kubectl get pvc rwx-demo-pvc -n $NAMESPACE -o jsonpath='{.status.phase}')
if [ "$STATUS" = "Bound" ]; then
echo "PVC is Bound ✅"
break
fi
echo "Still waiting..."
sleep 5
done

echo "3️⃣ Deploying 2 writer pods..."

cat <<EOF | kubectl apply -n $NAMESPACE -f -
apiVersion: apps/v1
kind: Deployment
metadata:
name: rwx-writer
spec:
replicas: 2
selector:
matchLabels:
app: rwx-writer
template:
metadata:
labels:
app: rwx-writer
spec:
containers:
- name: writer
image: busybox
command: ["/bin/sh", "-c"]
args:
- |
while true; do
echo "Written by
\$(hostname) at \$(date)" >> /shared/output.txt
sleep 5
done
volumeMounts:
- mountPath: /shared
name: shared-volume
volumes:
- name: shared-volume
persistentVolumeClaim:
claimName: rwx-demo-pvc
EOF

echo "Waiting for pods..."
kubectl rollout status deployment/rwx-writer -n $NAMESPACE

echo "4️⃣ Listing pods..."
kubectl get pods -o wide -n $NAMESPACE

echo "5️⃣ Showing shared file content..."
POD=$(kubectl get pod -n $NAMESPACE -l app=rwx-writer -o jsonpath='{.items[0].metadata.name}')
kubectl exec -n $NAMESPACE $POD -- sh -c "sleep 10 && cat /shared/output.txt"

echo ""
echo "========================================"
echo "✅ RWX demo completed successfully!"
echo "========================================"

echo "To clean up:"
echo "kubectl delete namespace $NAMESPACE"












Run the Demo






chmod +x rwx-demo.sh
./rwx-demo.sh






You should see output like:




Written by rwx-writer-xxxx at ...
Written by rwx-writer-yyyy at ...






That proves:




  • Both pods

  • Writing to the same file

  • Across potentially different nodes

  • Backed by Azure Files

  • Using ReadWriteMany









Production Use Cases




























Workload Shared Path
WordPress HA /wp-content/uploads
ML training
/dataset, /checkpoints
Batch jobs /output
CI runners /workspace








Troubleshooting Guide






1️⃣ PVC Stuck in Pending



Run:




kubectl describe pvc rwx-demo-pvc -n rwx-demo






Check the Events section.



Common causes:






StorageClass name mismatch



Check available classes:




kubectl get sc






Update:




storageClassName: azurefile-csi












2️⃣ Permission / Authorization Errors



If you see:




AuthorizationFailed






AKS identity likely lacks permissions.



Find node resource group:




az aks show \
--resource-group <rg> \
--name <cluster> \
--query nodeResourceGroup -o tsv






Grant Contributor role to AKS identity.









3️⃣ CSI Driver Not Installed



Check:




kubectl get csidrivers






If missing:




az aks update \
--resource-group <rg> \
--name <cluster> \
--enable-azure-file-csi-driver












4️⃣ kubectl wait Timeout



Sometimes kubectl wait misses the transition.



Use polling instead:




kubectl get pvc -n rwx-demo






If STATUS = Bound → provisioning succeeded.









Performance Tips




  • For Linux-only clusters, consider NFS-based Azure Files

  • For high-performance ML or analytics workloads, evaluate Azure NetApp Files

  • Monitor IOPS and throughput for scaling decisions









Final Thoughts



RWX storage unlocks:




  • True HA CMS deployments

  • Distributed batch processing

  • Shared AI datasets

  • Multi-replica CI environments



And with AKS + Azure Files, it’s fully managed and production-ready.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten AKS RWX Shared Storage Demo

Thematisch verwandte Begriffe: Shared, Storage, Demo · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-94097 | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. Th…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick