The issue where users can mount all three storage containers despite the intention to restrict access to just container-1 typically stems from a Global whitelist entry. A global whitelist allows all entities to access all containers unless more specific restrictions are applied at the container level. To correct this, specific whitelist entries need to be configured for each container to define and restrict access appropriately.References: Nutanix NCS-Core 6.8 training resources, the Nutanix Bible, and Nutanix technical documentation on storage container management.

For a configuration where a single VM should not exceed the bandwidth of a single 10G uplink and both uplinks need to be utilized, the correct bonding mode is balance-slb (Source Load Balancing). This mode allows both uplinks to be utilized while ensuring that a single VM will not exceed the capacity of one uplink, as traffic from each VM or "source" is assigned to one of the links in the bond. The other_config:
bond-rebalance-interval=30000 command is used to set the interval at which the bonding driver will rebalance the assignment of sources to links in the bond. This helps in maintaining optimal distribution of load across the links as network conditions change.
References:
* Nutanix Bible: Network Configuration
* Nutanix University: Advanced Network Configuration

ref: https://portal.nutanix.com/page/documents/details?targetId=Web-Console-Guide-Prism-v510:upg- hypervisor-upgrade-esxi-c.html