diff --git a/keps/sig-storage/3314-csi-changed-block-tracking/README.md b/keps/sig-storage/3314-csi-changed-block-tracking/README.md index 2bc3dac2039..1a454609d36 100644 --- a/keps/sig-storage/3314-csi-changed-block-tracking/README.md +++ b/keps/sig-storage/3314-csi-changed-block-tracking/README.md @@ -405,6 +405,10 @@ This is because a backup application would likely mount the PersistentVolume in `Block` mode in a Pod in order to read and archive the raw snapshot data blocks, and this read/archive loop will be driven by the stream of snapshot block metadata. +- The proposal does not specify how its security model is to be implemented. + It is expected that the RBAC policies used by backup applications + and the existing CSI drivers will be extended for this purpose. + ### Risks and Mitigations