PVC creation fails when using encryption in the Trident backend definition
Applies to
- NetApp Astra Trident
- NetApp ONTAP 9.x
- Trident backend created with encryption enabled
Issue
When a PVC is submitted for creation, using a Trident backend which has been defined with encryption enabled, it fails with the error:
Normal ProvisioningFailed 3s (x2 over 11s) csi.trident.netapp.io encountered error(s) in creating the volume: [Failed to create volume pvc-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx on storage pool aggr1 from backend nas-backend: backend cannot satisfy create request for volume trident_pvc_yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy: (ONTAP-NAS pool aggr1/aggr1; error creating volume trident_pvc_yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy: API status: failed, Reason: Key manager is not configured on the cluster. Use the "security key-manager external enable" command to configure the external key manager or "security key-manager onboard enable" command to configure the Onboard Key Manager., Code: 13001)]