Trident issued NAS economy PVs appears to export to the other K8b or OC cluster

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 110

Visibility:: Public

Votes:: 0

Category:: astra_trident

Specialty:: snapx

Last Updated:

Applies to

Trident for Kubernetes/Openshift until 20.01

Issue

When using ontap-nas-economy from two Trident using Kubernetes or Openshift clusters on the same SVM, the base volume on which such a PV is created may have the export from the other cluster, causing "access denied" errors in the created pod.

For example, the SVM has two volumes created through ontap-nas-ecnomy, with one cluster having the export of one and one having the export of the other:

trident_qtree_pool_trident_XGNOGQKASX, exported with policy ClusterA

trident_qtree_pool_trident_ZGKVFHAMCS, exported with policy ClusterB

The new PV created by Trident for Cluster A is created as a QTree with quotas on trident_qtree_pool_trident_ZGKVFHAMCS with its own ClusterA export.

Since the export goes through the root export of the volume, exported to ClusterB only, access from Cluster A nodes is denied.