Authentication (2FA and administrator group) about synology-csi

[jparklab]

1. I don't think the driver can support 2FA authentication. The typical way to support such case is issue a persistent access token to a service that does not require 2FA. Let me check if Synology supports service tokens

2. You can use capabiltities(https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container) to give minimum set of capabilities necessary to mount ISCSI volumes. and roles(https://kubernetes.io/docs/reference/access-authn-authz/rbac/) to give necessary access to the k8s APIs.
   You are right that username and password are exposed in the log messages and can be a security problem if the driver is used in the multi-user environment. It was done purely to make it easy to debug/troubleshoot. It'd be simple to redact them before logging them to the output.