No way to use a different TCP port

[makkes]

From what I understand the format of the storageAddress in the Secret referenced in TridentBackendConfig.spec.credentials.name only allows to specify a host or IP address but no TCP port. The driver always uses port 8080.

This is a problem in environments where TLS transport encryption is mandatory (which really should be any environment).

One way to mitigate this would be to enforce HTTPS redirection and enable HSTS in the "General Settings" (QuTS hero) as shown here:

But a much better way would be to not have port 8080 open to begin with and be able to tell the CSI driver to use port 443.

[JimmyTanMPM]

Hi @makkes
In this case, recommend to disable http in General Settings in the mean time http port will be disabled.

[makkes]

From how I understand the driver, disabling HTTP completely will render the driver useless as it will always try to connect to port 8080. What am I missing here?