search

NetApp / trident

Storage orchestrator for containers
Apache License 2.0
753 stars 218 forks source link

Enable Per-node igroup for ontap-san-economy #758

Closed eedo369 closed 1 year ago

eedo369 commented 2 years ago

Describe the solution you'd like Trident 22.07 introduced the feature of per-node igroup for the ONTAP-SAN driver. We would like to have this feature for the ONTAP-SAN-ECONOMY driver

Describe alternatives you've considered None

Additional context We are using on-prem OpenShift 4.6.8 with CoreOS and the ONTAP-SAN-ECONOMY driver. We have reached a high number of PVs in the cluster - about 650+. Due to the way iscsid and multipathd work, each node need to scan all of its devices periodically and when creating a new device. And so, we hope that the per-node mapping of PVs with help us with the performance and scalability of hundreds of PVs per cluster (we are looking for this feature for performance reasons and not security reasons).

This is dark site environment with no internet connectivity so we are limited with log collection and screenshots.

Pasting from the release notes of 22.07: "ONTAP-SAN volumes will now use per-node igroups and only map LUNs to igroups while actively published to those nodes to improve our security posture. Existing volumes will be opportunistically switched to the new igroup scheme when Trident determines it is safe to do so without impacting active workloads."

gnarl commented 1 year ago

The per-node igroup capability is now available for the ontap-san and ontap-san-economy storage drivers with the Trident v23.04 release.