Block, File & Object Storage
Ceph RBD block volumes, CephFS shared filesystems, and S3-compatible object buckets via Rook-Ceph, plus NFS and iSCSI bridging.
- `pvc/block` (Ceph RBD, ReadWriteOnce, up to 20K IOPS per volume) for databases, VMs, and single-pod workloads.
- `pvc/file` and `filesystem` (CephFS) for ReadWriteOnce and ReadWriteMany shared-filesystem access respectively.
- `object` (Ceph RGW) for S3-compatible buckets, up to 10K req/sec per bucket.
- `nfs` and `iscsi` bridge non-Kubernetes systems to Nest storage; both require an explicit client/initiator allow-list annotation or the resource fails to provision rather than opening access broadly.
- iSCSI targets get CHAP authentication auto-provisioned on first reconcile — a per-resource secret stored in the tenant namespace and owned by the DataResource, so it is removed with it.