EFS-CSI-Driver and the curse of the missing (deleted) PVC in #Kubernetes

A colleague at work mentioned seeing this log in some security logs: I thought Oh, that s simple, it must be that the IAM policy we applied to the assumed role for the EFS driver was missing that permission . It s never that simple. When I checked the logs for the efs-csi-controller pods, specifically the csi-provisioner container, [ ]