Topic

Kubernetes Storage

Persistent volumes, storage classes and CSI drivers as they are provisioned, attached and managed by Kubernetes clusters.

Current stories

securityConfirmed3 publishers

Unauthenticated Dell CSM flaw leaks admin credentials for every registered storage array

Dell patched six critical flaws in its Kubernetes storage modules, one letting unauthenticated attackers pull admin credentials for every registered array. The Authorization module holds those keys for each array it fronts, so one reachable deployment exposes all the storage registered behind it.

Publishers:bleepingcomputer.com scworld.com thehackernews.com

Perspective Coverage

3 publishers

Builder: Builder 27%
Operator: Operator 65%
Investor: Investor 8%

Reality

Evidence70
Adoption: Not scored
Hype gap+10
Incentives: Not scored
Confidence72

leadershipOne report1 publisher

Kubernetes 1.37 stamps every idle storage claim with the time it went unused

Kubernetes 1.37 turns on the PVC Unused condition by default and records when each storage claim stopped being referenced by a live pod. Finding idle claims is now built in, so platform teams have to decide who sets the deletion threshold and who answers for a mistake.

Publishers:kubernetes.io

Reality

Evidence62
Adoption: Not scored
Hype gap+8
Incentives35
Confidence58

buildOne report1 publisher

An NFS-only StorageClass leaves Zeebe's RocksDB commits without an atomic rename

An air-gapped cluster of 10 servers runs every workload on NFS. The write-up blames that for Elasticsearch and Zeebe I/O failures, and its own numbers rule out Longhorn and local-path on ~100GB node disks.

Publishers:dev.to

Reality

Evidence28
Adoption12
Hype gap+42
Incentives20
Confidence45

buildOne report1 publisher

A missing gp3 StorageClass made Storm's init containers blame Nimbus for two days

Apache Storm ships no maintained Helm chart and no migration guide, so one team wrote its own templates for EKS. The first thing that broke was a StorageClass name, and the only symptom was an init container log line.

Publishers:dev.to

Reality

Evidence58
Adoption18
Hype gap0
Incentives32
Confidence52

buildOne report1 publisher

A label selector now freezes the Postgres data and WAL volumes at the same instant

VolumeGroupSnapshot reached general availability in Kubernetes v1.36 in May 2026. The atomic snapshot it promises is still executed by the CSI driver and the storage beneath it, so the driver is where the guarantee has to be checked.

Publishers:thenewstack.io

Reality

Evidence58
Adoption35
Hype gap+12
Incentives45
Confidence55