Share via


NfsAccessRule interface

Rule to place restrictions on portions of the cache namespace being presented to clients.

Properties

access

Access allowed by this rule. Possible values include: 'no', 'ro', 'rw'

anonymousGID

GID value that replaces 0 when rootSquash is true. This will use the value of anonymousUID if not provided.

anonymousUID

UID value that replaces 0 when rootSquash is true. 65534 will be used if not provided.

filter

Filter applied to the scope for this rule. The filter's format depends on its scope. 'default' scope matches all clients and has no filter value. 'network' scope takes a filter in CIDR format (for example, 10.99.1.0/24). 'host' takes an IP address or fully qualified domain name as filter. If a client does not match any filter rule and there is no default rule, access is denied.

rootSquash

Map root accesses to anonymousUID and anonymousGID.

scope

Scope for this rule. The scope and filter determine which clients match the rule. Possible values include: 'default', 'network', 'host'

submountAccess

For the default policy, allow access to subdirectories under the root export. If this is set to no, clients can only mount the path '/'. If set to yes, clients can mount a deeper path, like '/a/b'.

suid

Allow SUID semantics.

Property Details

access

Access allowed by this rule. Possible values include: 'no', 'ro', 'rw'

access: NfsAccessRuleAccess

Property Value

anonymousGID

GID value that replaces 0 when rootSquash is true. This will use the value of anonymousUID if not provided.

anonymousGID?: undefined | string

Property Value

undefined | string

anonymousUID

UID value that replaces 0 when rootSquash is true. 65534 will be used if not provided.

anonymousUID?: undefined | string

Property Value

undefined | string

filter

Filter applied to the scope for this rule. The filter's format depends on its scope. 'default' scope matches all clients and has no filter value. 'network' scope takes a filter in CIDR format (for example, 10.99.1.0/24). 'host' takes an IP address or fully qualified domain name as filter. If a client does not match any filter rule and there is no default rule, access is denied.

filter?: undefined | string

Property Value

undefined | string

rootSquash

Map root accesses to anonymousUID and anonymousGID.

rootSquash?: undefined | false | true

Property Value

undefined | false | true

scope

Scope for this rule. The scope and filter determine which clients match the rule. Possible values include: 'default', 'network', 'host'

scope: NfsAccessRuleScope

Property Value

submountAccess

For the default policy, allow access to subdirectories under the root export. If this is set to no, clients can only mount the path '/'. If set to yes, clients can mount a deeper path, like '/a/b'.

submountAccess?: undefined | false | true

Property Value

undefined | false | true

suid

Allow SUID semantics.

suid?: undefined | false | true

Property Value

undefined | false | true