╰・github-alerts

[grim harness]

netapp-ci

[trident:stable/v22\.07] 1 new commit

895d055 update tools override - torirevilla

netapp-ci

[NetApp/trident] New branch created: stable/v22\.07

[grim harness]

netapp-ci

[trident:master] 1 new commit

31a680c Added support for NASType values to be accepted... - arnavs7

[grim harness]

gnarl

[NetApp/trident] Issue closed: #724 air gaped\(offline\)method of trident not working with operator in k8

[grim harness]

YeYoot

[NetApp/trident] Fork created: YeYoot/trident

[grim harness]

netapp-ci

[trident:master] 1 new commit

dc6e70f 22.07 Update Changelog - torirevilla

[grim harness]

gnarl

[NetApp/trident] Issue closed: #700 new nodeSelectors are not working when label value contains "true"

[grim harness]

netapp-ci

[trident:stable/v22\.07] 1 new commit

74df8b9 22.07 Update Changelog - torirevilla

[grim harness]

gnarl

[NetApp/trident] Issue closed: #746 documentation has not been updated for 22\.01

[grim harness]

gnarl

[NetApp/trident] New review comment on pull request #749: Update CONTRIBUTING\.md

I think we need to add instructions on selecting Trident for "Project Name" and to use "https://github.com/NetApp/trident" for the "Project Website" field.

gnarl

[NetApp/trident] Pull request review submitted: #749 Update CONTRIBUTING\.md

@juliantap, just one change

[grim harness]

juliantap

[NetApp/trident] Pull request review submitted: #749 Update CONTRIBUTING\.md

juliantap

[NetApp/trident] New review comment on pull request #749: Update CONTRIBUTING\.md

Added.

gnarl

[NetApp/trident] Issue closed: #744 can't deploy trident csi daemon set pods on GKE worker nodes

[grim harness]

gnarl

[NetApp/trident] Issue closed: #736 Pods get stuck in ContainerCreating state when iSCSI attaching fails

[grim harness]

gnarl

[NetApp/trident] Issue closed: #717 Enable Azure Netapp Files Network Features for provisioned volumes\.

[grim harness]

netapp-ci

[trident:master] 1 new commit

adfae76 Remove deprecated docs directory - adkerr

[grim harness]

netapp-ci

[trident:master] 2 new commits

6bbe3d7 Update ASUP version - torirevilla
549e4ab anf smb volume provisioning - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

1db81b0 Update CONTRIBUTING.md for online CCLA submission - gnarl

[grim harness]

netapp-ci

[trident:stable/v22\.07] 1 new commit

4129cf4 Notice file for Trident and ASUP - torirevilla

[grim harness]

netapp-ci

[trident:stable/v22\.07] 1 new commit

a957050 Update ASUP version - torirevilla

[grim harness]

netapp-ci

[NetApp/trident] New release published: v22\.07\.0

netapp-ci

[NetApp/trident] New tag created: v22\.07\.0

[grim harness]

SeanTBooker

[NetApp/trident] Fork created: SeanTBooker/trident

[grim harness]

pmokrz

[NetApp/trident] Issue opened: #750 Trident CSI sitll connecting on FCOS 36\.20220716\.3\.1

Describe the bug
After doing upgrade Fedora CoreOS to ver 36.20220716.3.1 the Node-CSI driver still connecting.

time="2022-08-02T14:24:57Z" level=warning msg="Could not update Trident controller with node registration, will retry." error="could not log into the Trident CSI Controller: error communicating with Trident CS
I Controller; Put "https://10.233.51.147:34571/trident/v1/node/l8101\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" increment=10.4962...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #741 setting nfsMountOptions: 'vers=4' results in error \(exit status 32\)

[grim harness]

gnarl

[NetApp/trident] Issue closed: #743 Renamed data aggregate breaks trident backend

[grim harness]

gnarl

[NetApp/trident] Issue closed: #747 Add support for setting priorityClassName

gnarl

[NetApp/trident] Issue closed: #738 Ability to backup/restore trident namespace

[grim harness]

eselvam

[NetApp/trident] Issue opened: #751 Trident install on MKE\(Mirantis Kubernetis \) is not working

Describe the bug

After install of the trident, while provisioning the volume in pod, we are getting below error in pod events.

tridentorchestrator/trident Failed to install Trident; err: failed to create the Trident DaemonSet; failed to create or patch Trident daemonset; could not patch Trident DaemonSet; daemonsets.apps "trident-csi" is forbidden: non-admin user "trident:trident-operator" [service account "trident:trident-csi"]. The configured privileged attributes access for...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #731 Support Kubernetes v1\.24

[grim harness]

eselvam

[NetApp/trident] Issue opened: #752 Could not update Trident controller with node registration, will retry\." error="could not log into the Trident CSI Controller: error communicating...

Describe the bug
We have openshift cluster. We try to install trident. After the installation, we do see only 1 pod is up for Csi pod. Hence the node where we are going to use the pod is not able to get the volume from trident csi.

Pod error:
Events:
Type Reason Age From Message

---

Normal Scheduled 55s default-sched...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #737 \[Feature\] Add securityContext to de default deployment from the operator\.

[grim harness]

kbrs-miaha

[NetApp/trident] Issue opened: #753 Trident Daemonset Appears to Ignore Node Taints

Describe the bug
Trident appears to ignore node taints and its daemonset deploy pods on all nodes rather than the nodes without a NoSchedule taint such as:

spec:
  taints:
  - effect: NoSchedule
    key: juju.is/kubernetes-control-plane
    value: "true

The issue appeared when upgrading Charmed Kubernetes from v1.23 to v1.24. The puzzling bit is the daemonset definition has the following node selector:

Node-Selector:  kubernetes.io/arch=amd64,ku...

[grim harness]

clintonk

[NetApp/trident] Issue closed: #753 Trident Daemonset Appears to Ignore Node Taints

[grim harness]

eselvam

[NetApp/trident] Issue opened: #754 MountVolume\.SetUp failed for volume Openshift 4\.10

Describe the bug
We use Openshift 4.10. pv and pvc are fine and bounded. We are able to mount the volume on the worker nodes manually however when we try to mount using openshift it is giving below error.

MountVolume.SetUp failed for volume "pvc-73701811-3298-4a7d-914f-bac813442324" : rpc error: code = Internal desc = error mounting NFS volume netappip:/trident_qtree_pool_openshift_prd_QBHALDTHGT/openshift_prd_pvc_73701811_3298_4a7d_914f_bac813442324 on mountpoint /var/lib/kubele...

[grim harness]

tksm

[NetApp/trident] Issue opened: #755 "Username is specified in both config and secret \.\.\." message is incorrectly logged

Describe the bug

"Username is specified in both config and secret ..." and similar warning messages are incorrectly logged after updating Trident v22.07.0.

time="2022-08-01T01:42:13Z" level=warning msg="clientPrivateKey is specified in both config and secret; overriding from secret."
time="2022-08-01T01:42:13Z" level=warning msg="Username is specified in both config and secret; overriding from secret."
time="2022-08-01T01:42:13Z" level=warning msg="Password is specified in bo...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #752 Could not update Trident controller with node registration, will retry\." error="could not log into the Trident CSI Controller: error communicating...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #750 Trident CSI sitll connecting on FCOS 36\.20220716\.3\.1

[grim harness]

newkit

[NetApp/trident] Issue opened: #756 trident\-csi 20\.04 and 20\.07 will not startup on

We see the trident-csi not starting up with this error messages in the log:

Warning  Unhealthy  6m36s (x10 over 7m21s)  kubelet            Startup probe failed: Get "https://10.9.96.45:17546/liveness": remote error: tls: protocol version not supported

2022/08/09 09:35:21 http: TLS handshake error from 10.9.96.45:48986: tls: client offered only unsupported versions: [303]

$ oc get csv  -n openshift-cnv
NAME                                       DISPLAY               ...

[grim harness]

msau42

[NetApp/trident] Issue opened: #757 RBAC improvements

Describe the solution you'd like
We have removed many RBAC permissions from Trident. The biggest improvements IMO are:

• Separating out daemonset RBACs and reducing it to zero
• Reducing Secret permissions to only the trident namespace

We have also been able to reduce many permissions because we don't use the operator to deploy and instead manually deploy the Trident controller and daemonset. Consider making these improvements and also separating out the operator to have its own set...

[grim harness]

eedo369

[NetApp/trident] Issue opened: #758 Enable Per\-node igroup for ontap\-san\-economy

Describe the solution you'd like
Trident 22.07 introduced the feature of per-node igroup for the ONTAP-SAN driver. We would like to have this feature for the ONTAP-SAN-ECONOMY driver

Describe alternatives you've considered
None

Additional context
We are using on-prem OpenShift 4.6.8 with CoreOS and the ONTAP-SAN-ECONOMY driver. We have reached a high number of PVs in the cluster - about 650+. Due to the way iscsid and multipathd work, each node need to scan all of its dev...

[grim harness]

netapp-ci

[trident:master] 5 new commits

388ad66 Fix nil pointer dereference in OntapAPIREST - reederc42
afa725c Don't use SAN publish enforcement outside CSI - adkerr
49f563e Narrowing the fields we request in the REST que... - ntap-rippy
22dad0e Fixes to make Trident unit tests pass with race... - inianv
6982405 Add test files for relevant packages - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

8e2926e Makefile: Allow specifying default trident imag... - ameade

[grim harness]

zwiy

[NetApp/trident] Issue opened: #759 Upgrade to 22\.07 TridentBackendConfig nas and nas\-eco failed state

Describe the bug
After the upgrade from v21.10.1 (and 22.04.0) to v22.07.0 only the ontap-nas and ontap-nas-economy drivers are stuck in a failed state:

message: Failed to apply the backend update; updating the data plane IP address isn't currently supported

But the IP address wasn't changed.

ONTAP SAN drivers (ontap-san, ontap-san-economy) don't have these problem.

Trident-main Logs:

time="2022-08-16T07:10:33Z" level=error msg="error syncing backend con...

[grim harness]

Cryptenom

[NetApp/trident] Issue opened: #760 Docker plugin update from 20\.07 to 22\.07

I wanted to update the Trident plugin from 20.07 to 22.07, but I encountered errors which I can't easily fix.

Environment

• Trident version: 20.07
• Trident installation flags used: docker plugin install --grant-all-permissions --alias netapp netapp/trident-plugin:22.04 config=/etc/netappdvp/netapp.jsonl
• Container runtime: Docker 20.10.12
• OS: Ubuntu 20.04.4
• NetApp backend types: ONTAP

To Reproduce

docker plugin disable -f netapp:latest
docker plugin rm n...

[grim harness]

MaxRink

[NetApp/trident] Issue opened: #761 Eventual consistency for topology labels

Describe the solution you'd like
Right now topology labels need to be present before trident starts.
But in our case (using capi/metal³) that is not always the case, sometimes the topology labels take longer than trident to appear.
Thus i propoe that trident should adopt to new topology labels that become available shortly after trident starts.

[grim harness]

netapp-ci

[trident:master] 4 new commits

52d3b37 Removes SCC fields that Trident daemonset does ... - reederc42
4b04481 Idempotent CRD Management - jwebster7
4efb1ae Correcting the debug comments to reflect approp... - mravi-na
7efa0a4 Helm and Operator Trident installation for Wind... - arnavs7

[grim harness]

gnarl

[NetApp/trident] Issue closed: #661 PodSecurityPolicy deprecated in Kubernetes v1\.21

[grim harness]

leftrightleft

[NetApp/trident] Fork created: leftrightleft/trident

[grim harness]

octodemo

[NetApp/trident] Fork created: octodemo/netapp-trident

[grim harness]

juliantap

[NetApp/trident] Pull request closed: #749 Update CONTRIBUTING\.md

juliantap

[NetApp/trident] Pull request closed: #721 Remove CVS for AWS from README

[grim harness]

paalkr

[NetApp/trident] Issue opened: #762 PVC attachment timeout when a node is terminated / removed from the cluster

Describe the bug
It looks like this bug https://github.com/NetApp/trident/issues/691 or a similar bug is introduced in Trident after the 22.01.1 release. Both the 22.04.0 and the 22.07.0 releases suffer from the same behavior.

Environment
Vanilla Kubernetes 1.21.12 deployed to AWS using kOps 1.23.1

Trident version: [e.g. 19.10]
22.04.0 and 22.07.1
Trident installation flags used: [e.g. -d -n trident --use-custom-yaml]
helm install -n kube-netapp trident .\trident-operat...

[grim harness]

willholz

[NetApp/trident] Fork created: willholz/trident

[grim harness]

eedo369

[NetApp/trident] Issue opened: #763 Support snapshots on ontap\-nas\-economy driver

Describe the solution you'd like
Support snapshots on ontap-nas-economy driver, in order to use Astra Control Center.

Describe alternatives you've considered
None.

Additional context
Due to the nature of K8s, we can easily reach hundreds and thousands of PVs, while using the Astra Trident + ONTAP solution. Because of this, we almost always have to use the ontap-nas-economy (mostly) and the ontap-san-economy (sometimes). This, in turn, make using Astra Control Center as a ...

[grim harness]

netapp-ci

[trident:master] 4 new commits

df5b511 100% unit test coverage for github.com/netapp/t... - jwebster7
915c998 Adds force unstage volume to remove volume with... - reederc42
1c0b686 Unit test github.com/netapp/trident/storage_dri... - jwebster7
28b2f9d ANF SMB Volume Snapshot and Cloning (#1045) - arnavs7

[grim harness]

netapp-ci

[trident:master] 2 new commits

418b9eb Enable NAE encrypted volumes in Trident - sphadnis007
064efe2 LUKS encrypted volume provisioning - ameade

[grim harness]

gnarl

[NetApp/trident] Issue closed: #672 Add a third volume provisioning encryption choice for ONTAP drivers to allow for NAE configurations

[grim harness]

andykingsuse

[NetApp/trident] Fork created: andykingsuse/trident

[grim harness]

clementnuss

[NetApp/trident] Issue opened: #764 importing an ontapnas volume panics \`trident\-main\`

Describe the bug
Importing an ontapnas volume after a simulated restore of the underlying QTree makes trident-main panic.

Environment

• Trident version: 22.04.0
• Container runtime: containerd github.com/containerd/containerd v1.6.6 10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1
• Kubernetes version: 1.24.4
• Kubernetes orchestrator: kubeadm
• Kubernetes enabled feature gates: n/a
• OS: Debian 11
• NetApp backend types: ONTAP0 NAS
• Other: Volumes are mounted t...

[grim harness]

netapp-ci

[trident:master] 2 new commits

c7e412e Added unit tests for frontend/common module - sphadnis007
7140a88 Use the pools luks attribute and not the driver... - ameade

[grim harness]

claudex

[NetApp/trident] Issue opened: #765 Define resources requests and limits for operator in helm template

Describe the solution you'd like
The Helm template for the operator deployment should allow to configure resources requests and limits for the container as it defined as best practices in Docker CIS Benchmark. And it would be better is default values are defined with sane values.

Describe alternatives you've considered
I didn't find any alternatives.

Additional context

• http...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #765 Define resources requests and limits for operator in helm template

[grim harness]

radioactive73

[NetApp/trident] Pull request closed: #678 Update operator\-upgrade\.rst

[grim harness]

netapp-ci

[trident:master] 1 new commit

a96993a Added unit tests for logger, metrics and operat... - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

309f4b0 Allow trident to import SMB volume. (#1051) - arnavs7

[grim harness]

netapp-ci

[trident:master] 1 new commit

2e61d8a Adds support for Kubernetes 1.25 and does not i... - reederc42

[grim harness]

ffilippopoulos

[NetApp/trident] Issue opened: #766 Support for Kubernetes 1\.24

Trying to use tridentctl to generate manifests (tridentctl install -n sys-trident --generate-custom-yaml) in order to update trident in one of our clusters that run Kubernetes 1.24.4 and I get the following logs:

INFO Created Kubernetes clients.                   namespace=default version=v1.24.4                                                                                                                        
ERRO Kubernetes version 1.24.4 is an unsupported Kubernetes version;...

[grim harness]

ffilippopoulos

[NetApp/trident] Issue closed: #766 Support for Kubernetes 1\.24

[grim harness]

gnarl

[NetApp/trident] Issue closed: #361 Support CSI Dynamic Volume Limits

[grim harness]

netapp-ci

[trident:master] 8 new commits

f1ef672 iSCSI fixes and improved iSCSI workflow comments - VinayKumarHavanur
edf9b30 Combine chap & non-chap work flows - mravi-na
cda3f1c iSCSI improvements: - VinayKumarHavanur
4095ae5 Remove unsupported non-multipath config and blo... - VinayKumarHavanur
12e85b1 Fix to add default NASType as NFS - arnavs7

gnarl

[NetApp/trident] Issue closed: #755 "Username is specified in both config and secret \.\.\." message is incorrectly logged

gnarl

[NetApp/trident] Issue closed: #759 Upgrade to 22\.07 TridentBackendConfig nas and nas\-eco failed state

[grim harness]

netapp-ci

[trident:master] 1 new commit

95f4316 ONTAP SAN Economy driver migration from ZAPI on... - nazneeninc

[grim harness]

netapp-ci

[trident:master] 1 new commit

2451037 Trid 11563 split operator bundle yaml 1 25 (#1061) - kjaxdev

[grim harness]

bernot-dev

[NetApp/trident] Issue opened: #767 stable/v22\.07 branch not tidy

Describe the bug
When running go mod tidy on the stable branch, a diff is generated.

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 22.07
• Trident installation flags used: N/A
• Container runtime: N/A
• Kubernetes version: N/A
• Kubernetes orchestrator: N/A
• Kubernetes enabled feature gates: N/A
• OS: N/A
• NetApp backend types: N/A
• Other:

To Reproduce
Steps to reproduce the behavior:

[grim harness]

netapp-ci

[trident:master] 4 new commits

11fae2d CSI controller API Rest unit test changes - agagan
92ae291 ANF SMB volume publishing - prajwalv-netapp
6e5d420 Split Trident RBAC resources into multiple ones... - inianv
44a821e Update trident version to 22.10 - ameade

[grim harness]

netapp-ci

[trident:master] 1 new commit

4d075e9 CSI controller API Rest unit test changes (#1072) - agagan

[grim harness]

fabian-born

[NetApp/trident] Issue opened: #768 Upgrade to 22\.07 TridentBackendConfig

Describe the bug
After the upgrade from v21.10.0 to v22.07.0 only the ontap-nas drivers are stuck in a failed state:

message: Failed to apply the backend update; updating the data plane IP address isn't currently supported

But the IP address wasn't changed. It looks like Issue #759.

But I use the cert-based authentication:

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 22.07.0
• Trident inst...

[grim harness]

netapp-ci

[trident:master] 1 new commit

bca28f6 anf smb improvements - prajwalv-netapp

[grim harness]

paalkr

[NetApp/trident] Issue closed: #762 PVC attachment timeout when a node is terminated / removed from the cluster

[grim harness]

jbnair

[NetApp/trident] Fork created: jbnair/trident

[grim harness]

Sagar2366

[NetApp/trident] Fork created: Sagar2366/netapp-trident

[grim harness]

obassett

[NetApp/trident] Fork created: obassett/trident

[grim harness]

acgustafson

[NetApp/trident] Issue opened: #769 Set the volumeName of a Persistent Volume that will be created by a PVC?

Is it possible to manually set the volume name a PersistentVolumeClaim will create a PersistentVolume with?

The use case I have for this is making clones using the trident.netapp.io/cloneFromPVC annotation. This requires me to know the Persistent Volume's name. Since the name is randomly generated this is slightly more tedious. I can track it down by looking at the spec.claimRef.name on the volume, but it feels like there should be a simpler option.

[grim harness]

acgustafson

[NetApp/trident] Issue closed: #769 Set the volumeName of a Persistent Volume that will be created by a PVC?

[grim harness]

clark-chien

[NetApp/trident] Fork created: clark-chien/trident

[grim harness]

domruf

[NetApp/trident] Issue opened: #770 trident mounts /dev/dm\-n instead of /dev/mapper/mpathn

Describe the bug
I noticed that on my k8s nodes, some volumes are mounted via paths like /dev/mapper/mpathd and some are mounted by paths like /dev/dm-2. I can't see any pattern in which case /dev/mapper/mpathn and which case /dev/dm-n is use. I have only one storage class for san volumes at the moment.

I'm not really sure if this is actually a problem or what is the real difference between the 2, but I read at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/...

[grim harness]

netapp-ci

[trident:master] 4 new commits

2b615c4 changing ONTAP REST API volume.encryption.enabl... - ntap-rippy
bc7ad66 Reduced GCP CVS-SO minimum volume size to 100 GiB - clintonk
f5b9dbd Updated Trident's 3rd-party dependencies for 22... - clintonk
ee1461b Ensure only SLM LIFs are published during Contr... - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 2 new commits

1cbf442 Allow the attachment and formatting of LUKS enc... - ameade
b69aef9 Updated minimum supported Kubernetes version to... - clintonk

[grim harness]

GentianRrafshi

[NetApp/trident] Issue opened: #771 tridentctl import renames and deletes volume in Netapp

Describe the bug
We are in a kubernetes environment and when using the following command

cat <<EOF | kubectl exec -n trident -it trident-csi-xxx -- tridentctl import volume ontap-san trident_pvc_23c1a0aa_61a4_439a_bfa6_5f992d013935_5646 -f -
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  annotations:
    meta.helm.sh/release-name: xxx
    meta.helm.sh/release-namespace: xxx
  labels:
    app.kubernetes.io/component: xxx
    app.kubernetes.io/instance: xxx
    ap...

[grim harness]

netapp-ci

[trident:master] 1 new commit

dc79cfc The frontend CSI helper plain unit test impleme... - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

182d402 Add UT coverage to storage/factory - arnavs7

[grim harness]

netapp-ci

[trident:master] 3 new commits

0e44e7d Removed Astra Data Store (ADS) driver - clintonk
7842b3f Simplifying the docker plugin mode logic for lo... - ntap-rippy
3ce83fd Remove astrads from unittests - ameade

[grim harness]

domruf

[NetApp/trident] Issue opened: #772 trident\-operator\.imageRegistry with custom registry not handled properly

Describe the bug
Our on-prem clusters can't access registries on the internet like registry.k8s.io directly. We have mirrors in our local registry though.
So I though I use a custom values.yaml and set trident-operator.imageRegistry.
The problem is, the helm chart (and operator) does not handle the path of the images properly then.
If I set imageRegistry to 'myregistry.com/netapp' the netapp/* images are found but the registry.k8s.io/sig-storage/* images are not.
If I set imageRegist...

[grim harness]

netapp-ci

[trident:master] 1 new commit

ff395ce Additional storage class unit test to improve t... - agagan

[grim harness]

Cellebyte

[NetApp/trident] Issue opened: #773 \[Bug\] Volumes are mounted as nobody:4294967294 which is a problem for rootless containers\.

Describe the bug
When I create a PVC for a Pod with the following securityContext.

securityContext:
    fsGroup: 1000
    runAsUser: 1000

The pod is not running as a root container.
When we now login to the container and try to create a file inside the mounted volume we get the following issue.

bash-4.4$ ls -l /var/data/
total 4
drwxrwxrwx 2 nobody 4294967294 4096 Oct 12 10:09 kpi
bash-4.4$ ls -l /var/data/kpi/
total 0
bash-4.4$ id
uid=1000...

[grim harness]

netapp-ci

[trident:master] 3 new commits

9635330 Cross-namespace volume sharing - clintonk
1a108db Fix for duplicate iSCSI sessions. - VinayKumarHavanur
1d50366 Remove serviceAccount when Trident Orchestrator... - benclark0

[grim harness]

netapp-ci

[trident:master] 1 new commit

b1d12e8 service discovery for windows nodes - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

85d98c1 Update bundle_post_1_25.yaml to include cluster... - benclark0

[grim harness]

netapp-ci

[trident:master] 2 new commits

dc65277 Remove PSP api rules from post_125 bundle yaml.... - kjaxdev
6732da1 Use Windows daemonset path - reederc42

[grim harness]

netapp-ci

[trident:master] 2 new commits

6732da1 Use Windows daemonset path - reederc42
3eee2e2 Update Trident RBAC resource names per new nami... - inianv

[grim harness]

gnarl

[NetApp/trident] Issue closed: #548 trident with dockerd configured with \-\-data\-root

gnarl

[NetApp/trident] Issue closed: #760 Docker plugin update from 20\.07 to 22\.04 / 22\.07

gnarl

[NetApp/trident] Issue closed: #771 tridentctl import renames and deletes volume in Netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

849c054 Changes for path separator fix - prajwalv-netapp

[grim harness]

mayrstefan

[NetApp/trident] Fork created: mayrstefan/trident

[grim harness]

mayrstefan

[NetApp/trident] Pull request opened: #774 Issue 772

Change description

The helm chart has a parameter imageRegistry which is used to set an alternative registry url for trident and csi sidecar images which can cause an issue for some installations. That registry has to contain images from two different sources.
This change keeps imageRegistry for the csi sidecar images and adds tridentImageRegistry to use for mirrored trident images.
It tries to do the same for the cli with an addition trident-image-registry parameter

Project tra...

[grim harness]

SecurityLab-CodeAnalysis

[NetApp/trident] Fork created: SecurityLab-CodeAnalysis/netapp_trident

[grim harness]

netapp-ci

[trident:stable/v22\.10] 4 new commits

9180842 stable/v22.10 - Bellizzi, David
5523e5c Revert "Remove PSP api rules from post_125 bund... - kjaxdev
3a7c477 Changes for path separator fix - prajwalv-netapp
ef2ebbe Corrected daemonSet120YAMLTemplateWindows with ... - sphadnis007

netapp-ci

[NetApp/trident] New branch created: stable/v22\.10

[grim harness]

TeamSalvador

[NetApp/trident] Fork created: TeamSalvador/trident

CodeGlitcher

[NetApp/trident] Issue opened: #775 Disable deployment of CRD tridentorchestrator in helm chart

Describe the solution you'd like
Currently the helm char automatically deploys the tridentorchestrator crd in the same namespace as the operator.
In our cluster we currently have the tridentorchestrator and operator deployed in seperate namespace.
(we have all operators in the same namespace and the application they manage in a different 1.

We would like a option to deploy the tridentorchestrator in a different namespace,
or the option to not deploy the tridentorchestrator with hel...

[grim harness]

CodeGlitcher

[NetApp/trident] Pull request opened: #776 Support custom labels on operator pod

Support priorityClassName

Change description

Support custom labels and PriorityClassName on operator pod

Project tracking

https://github.com/NetApp/trident/issues/719

Do any added TODOs have an issue in the backlog?

No

Did you add unit tests? Why not?

Could not find test on helm chart.
Deployed the chart on our own test cluster.

Does this code need functional testing?

No

Is a code review walkthrough needed? why or why not?

No, not that complica...

woutersmit

[NetApp/trident] Pull request opened: #777 Allows overriding the namespace of the orchestrator

Change description

Allows overriding the namespace of the orchestrator if you need it to be deployed to a namespace other than the namespace the operator is deployed in.

Project tracking

#775

Do any added TODOs have an issue in the backlog?

No

Did you add unit tests? Why not?

No. minor change in helm chart, deploys correctly to private cluster

Does this code need functional testing?

No.

Is a code review walkthrough needed? why or why not?

No.

...

[grim harness]

netapp-ci

[trident:master] 2 new commits

bae9b20 Corrected daemonSet120YAMLTemplateWindows with ... - sphadnis007
e428670 The issue Flexgroup REST driver fails to create... - agagan

[grim harness]

netapp-ci

[trident:master] 3 new commits

e177758 Add force detach feature flag - benpresnell
97f8a20 Revert: Remove PSP api rules from post_125 bund... - kjaxdev
ab63623 Update changelog and readme for 22.10 - jwebster7

[grim harness]

netapp-ci

[trident:stable\-22\.10\-changelog] 1 new commit

4c5a200 update changelog and readme - jwebster7

netapp-ci

[NetApp/trident] New branch created: stable\-22\.10\-changelog

[grim harness]

SNY93

[NetApp/trident] Issue opened: #778 Support for Kubernetes v1\.25\+

Install failed; could not delete pod security policy; the server could not find the requested resource. Resolve the issue; use 'tridentctl uninstall' to clean up; and try again.

https://kubernetes.io/docs/concepts/security/pod-security-policy/

gnarl

[NetApp/trident] Issue closed: #778 Support for Kubernetes v1\.25\+

[grim harness]

pacoxu

[NetApp/trident] Fork created: pacoxu/trident

pacoxu

[NetApp/trident] Pull request opened: #779 Stop using the beta\.kubernetes\.io/os

Change description

See https://github.com/kubernetes/kubernetes/issues/89477, https://github.com/kubernetes/kubernetes/issues/89477#issuecomment-603911496.

Project tracking

Do any added TODOs have an issue in the backlog?

Did you add unit tests? Why not?

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #165 Feature request: Support for Windows Containers on Windows Server

[grim harness]

Cellebyte

[NetApp/trident] Issue closed: #773 \[Bug\] Volumes are mounted as nobody:4294967294 which is a problem for rootless containers on K8s

[grim harness]

netapp-ci

[trident:stable/v22\.10] 3 new commits

d783d5e Tidies Go modules - reederc42
a1311d3 Update changelog and readme for 22.10 - jwebster7
9ff1ec1 Update ASUP version to 22.10 - jwebster7

[grim harness]

SecurityLab-CodeAnalysis

[NetApp/trident] Fork created: SecurityLab-CodeAnalysis/netapp_trident

[grim harness]

netapp-ci

[trident:stable/v22\.10] 1 new commit

e0353f0 Updates notices for v22.10 - reederc42

[grim harness]

netapp-ci

[NetApp/trident] New release published: v22\.10\.0

netapp-ci

[NetApp/trident] New tag created: v22\.10\.0

[grim harness]

gnarl

[NetApp/trident] Issue closed: #770 trident mounts /dev/dm\-n instead of /dev/mapper/mpathn

[grim harness]

swarnima1901

[NetApp/trident] Fork created: swarnima1901/STaaS-trident

[grim harness]

swarnima1901

[NetApp/trident] Fork created: swarnima1901/trident

[grim harness]

swarnima1901

[NetApp/trident] Fork created: swarnima1901/trident

[grim harness]

nadgowdas

[NetApp/trident] Fork created: nadgowdas/trident

[grim harness]

nadgowdas

[NetApp/trident] Pull request opened: #780 Stable/v19\.11

Change description

Project tracking

Do any added TODOs have an issue in the backlog?

Did you add unit tests? Why not?

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a note in the changelog?

Does this code require documentation changes?

Additional Information

[grim harness]

ysakashita

[NetApp/trident] Issue opened: #781 Change a log level from error to warning in CheckMountOptions\(\)

Describe the bug

I would like to change a log level from error to warning in CheckMountOptions().
I found the error messege in trident log(v22.10.0).

time="2022-11-07T03:21:02Z" level=error msg="checking mount options failed; mismatch in mount option: bind, this might cause mount failure" requestID=c8d856be-1fff-4926-8770-7a5bbeb4ed0c requestSource=CSI source=/dev/dm-4 target=/var/lib/kubelet/plugins/kubernetes.io/csi/volumeDevices/publish/pvc-831fab01-891d-463c-a51a-6d08aa468...

[grim harness]

netapp-ci

[trident:master] 5 new commits

3fb6008 tridentctl tvpub commands - clintonk
a8bd114 Node bookkeeping for force detach - benpresnell
99b1dd7 Bump asup version to 22.10 - jwebster7
3a6df2f Adding ability to track owning flexvol for econ... - bhatnag
8e69fb4 make nodeUnstageSMBVolume use the new tracking ... - benpresnell

[grim harness]

netapp-ci

[trident:master] 1 new commit

a1b7ff4 Reduce privileges for Trident RBAC resources - inianv

[grim harness]

netapp-ci

[trident:master] 1 new commit

ab26110 Update trident version to 23.01 - benclark0

[grim harness]

felixhuettner

[NetApp/trident] Issue opened: #782 Tag 99\.99\.99 appeared in docker registry

Describe the bug
On hub.docker.com the trident releases 99.99 and 99.99.99 appeared.
https://hub.docker.com/r/netapp/trident-operator/tags?page=1&name=99.99

Image link is this: https://hub.docker.com/layers/netapp/trident-operator/99.99/images/sha256-e149ba58aa0ce87566fee9c4c79b4c65907c1d113833478817af969a7806e856?context=explore

This would be quite a large version jump and there is also no matching github release for that. So i assume it was pushed in error.

However since ...

[grim harness]

felixhuettner

[NetApp/trident] Issue closed: #782 Tag 99\.99\.99 appeared in docker registry

[grim harness]

prezhdarov

[NetApp/trident] Issue opened: #783 trident\-operator helm upgrade to v22\.10 fails when kubernetes version is 1\.25\+

In the rare cases when trident-operator 22.07.0 runs on kubernetes 1.25 (with PodSecurityPolicies deprecated), helm upgrade to 22.10 fails with the following message:
'Error: UPGRADE FAILED: unable to build kubernetes objects from current release manifest: resource mapping not found for name: "tridentoperatorpods" namespace: "" from "": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1"
ensure CRDs are installed first"'

Not sure fix for this will be worth it as I doubt t...

[grim harness]

netapp-ci

[trident:master] 2 new commits

c037dae Addition to change log for Improved performance... - bhatnag
97b38fc Updating tridenctl image registry helper text - sphadnis007

[grim harness]

Cajga

[NetApp/trident] Issue opened: #784 Support for Bottlerocket OS \(AWS EKS Anywhere\)

Describe the solution you'd like
AWS EKS Anywhere bundles Bottlerocket OS for kubernetes nodes. We wanted to use astra trident for our EKS-A cluster with bottlerocket os nodes when we realized that it was not possible due to trident host prerequisites. We opened a ticket about the issue with the AWS team as well.
Would be nice if w...

[grim harness]

GentianRrafshi

[NetApp/trident] Issue opened: #785 Multi\-Attach Error in Kubernetes Cluster using Trident iSCSI Multipath as storage solution

Describe the Error
We have a cluster, that is using the trident as a storage solution for PersistentVolumes. Unfortunately, we often get an error that looks like this one here

Unable to attach or mount volumes: unmounted volumes=[xxx], unattached volumes=[xxx]: timed out waiting for the condition

or

 Multi-Attach error for volume "pvc-xxx" Volume is already exclusively attached to one node and can't be attached to another

Usually it happens after we drain nodes f...

[grim harness]

netapp-ci

[trident:master] 1 new commit

0e2d373 Added support for flexgroupAggregateList to spe... - ntap-rippy

[grim harness]

gnarl

[NetApp/trident] Issue closed: #784 Support for Bottlerocket OS \(AWS EKS Anywhere\)

[grim harness]

netapp-ci

[trident:master] 1 new commit

0842e66 Adds rate limiter and middleware to api server - reederc42

[grim harness]

netapp-ci

[trident:master] 3 new commits

00b2ac4 Work around ONTAP pagination bug in vserver-sho... - clintonk
c89de8b Rename Trident pod, deployment, daemonsets per ... - inianv
1888bf5 Added fix for nil pointer dereference in Triden... - arnavs7

[grim harness]

netapp-ci

[trident:master] 1 new commit

2195a0f Fix RBAC permissions for ASUP sidecar to access... - inianv

[grim harness]

netapp-ci

[trident:master] 1 new commit

fc6ac1d Volume publication rw cache - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

b8c452c Allow Helm/Operator to configure the imagePullP... - agagan

[grim harness]

erikgruetter

[NetApp/trident] Issue opened: #786 Automatic Polling SVM on aggregate volumes deployment

Trident is not automatically getting information from SVM on which aggregate volumes has to be deployed. Pod must manually be restarted to get the new aggr-list information from the SVM. Please implement an automatic polling from this data.

If it helps you prioritise this request, you can add Bank Julius Baer & Co. Ltd. as a company which needs this urgently for the upcoming lifecycle next year.

[grim harness]

nitnatsnocER

[NetApp/trident] Issue opened: #787 upgrade to 22\.10\.0 \- trident crashes when a volume has state = upgrading

Describe the bug
During update from 22.07.0 to 22.10.0 I face a segfault error in the log. We use trident to manage volumes on solidfire storage via ISCSI from kubernetes. We do not use the operator, we have our own helm chart.

here is the log:

`trident-6cff996fdb-khggp trident time="2022-12-05T14:31:21+01:00" level=info msg="Running Trident storage orchestrator." binary=/bin/trident build_time="Mon Oct 31 16:03:20 EDT 2022" version=22.10.0
trident-6cff996fdb-khggp trident time="...

[grim harness]

netapp-ci

[trident:master] 3 new commits

11e7a7c Add audit logger - benpresnell
e8adb05 busybox:1.34.1 has a breaking change for buildi... - ntap-rippy
aca64e4 Using uclibc instead per https://github.com/doc... - ntap-rippy

[grim harness]

tongpu

[NetApp/trident] Issue opened: #788 nouuid mount option for XFS volumes lost when mountOptions are defined in StorageClass

Describe the bug
In our environment we've run into the issue reported in #514, but we're already running v22.01.1, which should contain the fix.

After further investigation we believe that this is caused, because we've configured the discard mount option in our StorageClass, which seems to cause the nouuid option to not be added anymore.

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 22.01.1
• Trident i...

[grim harness]

ntap-johanneswagner

[NetApp/trident] Issue opened: #789 Missing index file at helm repo leads to issues with JFrog Artficatory

Describe the bug
Please see https://jfrog.atlassian.net/browse/RTFACT-21534 which describes what's happening in a good way. Besides the point that this behavior should be fixed in Artifactory anyway, we should think about whether adding an index file to https://netapp.github.io/trident-helm-chart/ would be a good idea to avoid hitting this bug.

To Reproduce
curl -v https://netapp.github.io/trident-helm-chart => shouldn't return an Error 404

Expected behavior
curl -v ...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #788 nouuid mount option for XFS volumes lost when mountOptions are defined in StorageClass

[grim harness]

SecurityLab-CodeAnalysis

[NetApp/trident] Fork created: SecurityLab-CodeAnalysis/netapp_trident

[grim harness]

ArnoRienstra

[NetApp/trident] Pull request review submitted: #777 Allow overriding the namespace of the orchestrator

Looks all right!

[grim harness]

gprossliner

[NetApp/trident] Issue opened: #790 Do I still need tridentctl to create a Backend?

The documentation Deploying with the Trident Operator mentions tridentctl is multiple places, like in the "Creating a Trident Backend" section.

But if I install a TridentOrchestrator object, I have a CRD named TridendBackend. Is it possible to configure a backend using the kubernetes api only? Or do I really need to use tridentctl, even with the operator?

Thank you

[grim harness]

gprossliner

[NetApp/trident] Issue closed: #790 Do I still need tridentctl to create a Backend?

[grim harness]

netapp-ci

[trident:master] 2 new commits

1714077 Remove cluster role and roleBinding while upgra... - inianv
41e1c03 Enabled dataLIF update for all ONTAP NAS backends - sphadnis007

[grim harness]

nitnatsnocER

[NetApp/trident] Issue closed: #787 upgrade to 22\.10\.0 \- trident crashes when a volume has state = upgrading

[grim harness]

tseelbach

[NetApp/trident] Fork created: tseelbach/trident

tseelbach

[NetApp/trident] Pull request opened: #791 link to graph driver details is broken

Change description

Link to graph driver storage is broken. I don't know what it should be so i put in a comment

Project tracking

Do any added TODOs have an issue in the backlog?

Did you add unit tests? Why not?

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a note in the changelog?

D...

[grim harness]

Numblesix

[NetApp/trident] Issue opened: #792 Lssci used on RHEL CoreOS but not installed

Describe the bug
I noticed today that Trident 22.10 uses lsscsi (maybe even before that) but RHEL CoreOS Nodes dont have this binary installed neither is it possible to install it on those nodes. Sofar i have not noticed any issues on my Cluster (3 so far) but i think it could be confusing a lot of users while searching for errors (thats how i stumbeled upon it).

Environment
Non-prod Env, big Netapp Customer in Germany

• Trident version: 22.10
• Trident installation flags us...

[grim harness]

youguichong

[NetApp/trident] Fork created: youguichong/trident

[grim harness]

mac-chaffee

[NetApp/trident] Issue opened: #793 Failed to resize ReadWriteMany volume online

Describe the bug
After resizing a ReadWriteMany volume that was mounted by two different pods on two different nodes, I got the following errors:

Kubelet:

Jan 04 10:30:44 k8s-node01.k8s.renci.org kubelet[5323]: E0104 10:30:44.712926    5323 operation_generator.go:2033] NodeExpandVolume.NodeExpandVolume failed for volume "pvc-adaa39c9-43fa-46bd-a94e-17c2252a747b" (UniqueName: "kubernetes.io/csi/csi.trident.netapp.io^pvc-adaa39c9-43fa-46bd-a94e-17c2252a747b") pod "apsviz-geoserver...

[grim harness]

netapp-ci

[trident:master] 14 new commits

7390685 Bump maximum supported k8s version to 1.26 - porrua
dfd2558 Updated Trident to use new Azure SDK for Go - clintonk
870de34 iSCSI self healing thread creation and configur... - VinayKumarHavanur
ecf9f9c iSCSI selh-healing: Defining in memory map, sel... - mravi-na
9b43a7a Implementation of iSCSI self healing action. - VinayKumarHavanur

[grim harness]

netapp-ci

[trident:master] 1 new commit

ee233f9 Adding Storage pools support for GCP volumes wi... - bhatnag

[grim harness]

MaxRink

[NetApp/trident] Issue opened: #794 Chart breaks when upgrading from k8s 1\.24 to 1\.25

Describe the bug
Currently the chart doesnt survive an upgrade of k8s 1.24.x to 1.25 due to PodSecurityPolicies

Helm upgrade failed: unable to build kubernetes objects from current release manifest: resource mapping not found for name: "tridentoperatorpods" namespace: "" from "": no matches for kind "PodSecurityPolicy" in version "policy/v1beta1"
ensure CRDs are installed first

Environment
Provide accurate information about the environment to help us reproduce the...

[grim harness]

scotchr

[NetApp/trident] Issue opened: #795 Trident Operator does not work with node taints

When all nodes in the k8s cluster have taints (e.g. cattle.io/os: linux for rke) the transient-trident-version-pod fails to start as the pod is not created with any tolerations.

It appears that the yaml for the pod is missing the tolerations in https://github.com/NetApp/trident/blob/master/cli/k8s_client/yaml_factory.go

The following requires tolerations to be added

const tridentVersionPodYAML = `---
apiVersion: v1
kind: Pod
metadata:
name: {NAME}
{LABELS}
{OWNER_REF}
...

[grim harness]

netapp-ci

[trident:master] 6 new commits

8a07bec Consider the LIFs in down state during iSCSI vo... - VinayKumarHavanur
78da861 Log a warning if DataLIF is provided in backend... - mravi-na
c5a81d6 Enable volume expansion for LUKS encrypted volumes - simrins
7160d85 Updated Trident's 3rd-party dependencies for 23... - clintonk
65c656e Rotate LUKS passphrase during NodePublishVolume - ameade

[grim harness]

burkhat

[NetApp/trident] Issue opened: #796 Support for Windows Containers on Windows Server 2022 for on\-premises \- ontap

Describe the solution you'd like
We've seen that trident supports now Windows Container in Azure, https://github.com/NetApp/trident/issues/165
But it is also necessary to support NetApp - ontap on-premises.

This very useful for us, because we offer Openshift Hybrid Cluster on-premises for our customer.
They use Linux and Windows Container and at the Moment we cannot offer any NetApp storage for Windows in our Cluster.

Openshift only supports Windows Server 2022 onprem.

[grim harness]

netapp-ci

[trident:master] 2 new commits

4913266 Fix to capture ANF Subvolumes error messages - ntap-arorar
7693a9a Fixing a bug preventing clone of imported volum... - bhatnag

[grim harness]

netapp-ci

[trident:master] 2 new commits

a1fcad9 Changes to support FSx SMB volume provisioning ... - prajwalv-netapp
61678dc Changes to allow unix permission with mixed sec... - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

2d1f538 Implementation to exclude pod security policy - VinayKumarHavanur

[grim harness]

netapp-ci

[trident:master] 1 new commit

8e46e8f Luks backchannel - ameade

[grim harness]

ashimagarg27

[NetApp/trident] Fork created: ashimagarg27/trident

[grim harness]

philipp1992

[NetApp/trident] Issue opened: #797 UID and GID of existing files in PVCs are reset to 99

Hi,

all our existing NFS PVCs have reset the UID and GID from all files and directories to 99 instead of the UID of the container user.

Setup:
Openshift 4.10 with kubernetes v1.23.12+8a6bfe4
Red Hat Enterprise Linux CoreOS 410
Trident 22.01.0

Storageclass:

`kind: StorageClass
apiVersion: storage.k8s.io/v1
metadata:
name: file-no-backup
provisioner: csi.trident.netapp.io
parameters:
backendType: ontap-nas-economy
selector: netapp=xxx-xxxx-trident0
reclaimPolicy: D...

[grim harness]

netapp-ci

[trident:master] 2 new commits

b327113 Fix potential nil dereference in VolumeModifyUn... - agagan
8841bc0 Workflow-based trace logging - benpresnell

[grim harness]

netapp-ci

[trident:stable\-23\.01\-changelog] 3 new commits

99e17a5 stable/v23.01 - Bellizzi, David
c07cf4d Fix potential nil dereference in VolumeModifyUn... - ameade
5d091f1 changelog for 23.01 - jwebster7

netapp-ci

[NetApp/trident] New branch created: stable\-23\.01\-changelog

[grim harness]

spohner

[NetApp/trident] Issue opened: #798 Trident Orchestrator crashlooping due to non existing volume

Describe the bug
We experienced downtime in one of our production clusters when the tridentorchestrator failed with the error message:

 Failed to install Trident; err: command terminated with exit code 1; Error: could not get version: Trident initialization failed; error attempting to clean up volume pvc-a075216f-4f29-47bc-99c6-e52782c1e8c6 from backend fsx01-k8sXX-san: error checking for existing volume: API status: failed, Reason: Volume name: The first character must be a...

[grim harness]

netapp-ci

[trident:master] 3 new commits

77e0cac Update changelog v23.01.0 - jwebster7
b4ad2b3 Increasing the code coverage for ontap_common.go - bhatnag
a4d3c52 fixing broken unit tests for ontap_common_test.go - bhatnag

[grim harness]

netapp-ci

[trident:stable/v23\.01] 3 new commits

7855b18 Update ASUP version - jwebster7
e35bf40 Update changelog for 23.01 - jwebster7
37b01b8 Updates notice files for Trident and ASUP - reederc42

netapp-ci

[NetApp/trident] New branch created: stable/v23\.01

[grim harness]

netapp-ci

[NetApp/trident] New release published: v23\.01\.0

netapp-ci

[NetApp/trident] New tag created: v23\.01\.0

[grim harness]

khassel

[NetApp/trident] Issue opened: #799 release v23\.01\.0: missing clusterroles

Describe the bug

Installing new trident version v23.01.0

• trident-operator starts but errors with

time="2023-02-01T11:28:27Z" level=error msg="Object creation failed." err="clusterroles.rbac.authorization.k8s.io \"trident-controller\" is forbidden: user \"system:serviceaccount:trident:trident-operator\" (groups=[\"system:serviceaccounts\" \"system:serviceaccounts:trident\" \"system:authenticated\"]) is attempting to grant RBAC permissions not currently held:\n{APIGroup...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #798 Trident Orchestrator crashlooping due to non existing volume

gnarl

[NetApp/trident] Issue closed: #772 trident\-operator\.imageRegistry with custom registry not handled properly

gnarl

[NetApp/trident] Issue closed: #458 Trident is trying to unmount volumes that not exist anymore

[grim harness]

karale-netapp

[NetApp/trident] Fork created: karale-netapp/trident

[grim harness]

Fedibnp

[NetApp/trident] Issue opened: #800 Add Storage Resource Quota on the backend level

Describe the solution you'd like

Today, we don't have any solution that allows the Trident administrator to limit the amount of storage capacity a Kubernetes user/administrator can provision.
We want to add a new backend option that, if defined, sets a value that the sum of all PVCs should never exceed.
This option could be considered as a storage quota.

Describe alternatives you've considered
As an alternative, we can add a new option to limit the number of volumes that can...

[grim harness]

Fedibnp

[NetApp/trident] Issue opened: #801 Restore backend state automatically after deconnexion

In order to be able to manage Netapp Trident persistent volumes, the Trident backend should be online.

If for some reason we lose the connection between the Trident controller and the NetApp SVM even for a few seconds, the backend will go to a failed state and will never go back online by itself, even if the connection is restored.

To resume an online state for the backend, we need to evacuate or recreate the controller replica set in order to refresh the configuration.

We like to ha...

[grim harness]

takuhiro

[NetApp/trident] Issue opened: #802 type assertion error could occur

Describe the bug

We hit the following error in our environment just once.

time="2023-02-01T02:04:48Z" level=fatal msg="could not perform assertion: hybridControllerFrontend.(controllerhelpers.ControllerHelper)"

As I can see the trident log, the process exited by the fatal error and then the trident container was restarted successfully.

hybridControllerFrontend could be nil if a temporary error(e.g. fa...

[grim harness]

khassel

[NetApp/trident] Issue opened: #803 Trident \`v23\.01\.0\` ontap san works not reliable on centos7 nodes due to old multipath version

Describe the bug

With v23.01.0 new code was introduced here which calls multipath -C /dev-dm....

We are using centos7 Nodes with multipath-tools v0.4.9 (05/33, 2016), this version has no -C switch.

This leads to problems when mounting an iscsi volume, here some logs of the trident pod:

~❯ kubectl -n trident logs trident-node-linux-vw4t2
Defaulted container "trident-main" out of: t...

[grim harness]

gnarl

[NetApp/trident] Issue closed: #462 Trident snapshot objects not deleted with deletionPolicy Retain

gnarl

[NetApp/trident] Issue closed: #483 FailedMount: Unable to attach or mount volumes

[grim harness]

gnarl

[NetApp/trident] Issue closed: #612 useREST API: SVM Name mandatory in the backend

gnarl

[NetApp/trident] Issue closed: #702 Registry missing \-> ImageInspectError

[grim harness]

gnarl

[NetApp/trident] Issue closed: #706 ontap\-iscsi: Cannot recover from network issues

gnarl

[NetApp/trident] Issue closed: #659 Helm Installation Step

[grim harness]

netapp-ci

[trident:master] 5 new commits

86a9713 Update ASUP version - jwebster7
74f3f25 Unit Test coverage for GCP api code - VinayKumarHavanur
3252a6d Added unit tests for GCP driver - sphadnis007
458d4ba Set log layer in core contexts - clintonk
6acc674 Added Unit Test coverage for ONTAP SAN Economy ... - arnavs7

[grim harness]

gnarl

[NetApp/trident] Issue closed: #768 Upgrade to 22\.07 TridentBackendConfig failed

[grim harness]

gnarl

[NetApp/trident] Issue closed: #716 Update docs and storage provisioner to support updated kubernetes storage class params

gnarl

[NetApp/trident] Issue closed: #627 FATA Install pre\-checks failed; could not initialize Kubernetes client; unable to load in\-cluster configuration, KUBERNETES\_SERVICE\_HOST and K...

gnarl

[NetApp/trident] Issue closed: #757 RBAC improvements

[grim harness]

chrisbecke

[NetApp/trident] Issue opened: #804 Planned support for Docker CSI

Describe the solution you'd like

Docker 23.0.0 is released with patch notes and includes support for CSI volumes via https://github.com/moby/moby/pull/41982.

csi-plugins-for-docker-swarm is tracking the progress of various CSI drivers in adding this support.

Is Docker CSI compatibility planned for NetApp Trident?

[grim harness]

gnarl

[NetApp/trident] Issue closed: #756 trident\-csi 22\.04 and 22\.07 will not startup on openshift 4\.11

[grim harness]

gnarl

[NetApp/trident] Issue closed: #656 Frequent fs inconsistencies on trident pvcs, errors surfacing on resize operations

[grim harness]

gnarl

[NetApp/trident] Issue closed: #596 K8 cluster generating excessive "other IOPS" on NetApp NAS nodes\.

[grim harness]

clintonk

[NetApp/trident] Issue closed: #707 Trident CSI not provisioning volumes correctly and producing exit code 32

[grim harness]

gnarl

[NetApp/trident] Issue closed: #754 MountVolume\.SetUp failed for volume Openshift 4\.10

[grim harness]

tosunkaya

[NetApp/trident] Fork created: tosunkaya/trident

[grim harness]

gnarl

[NetApp/trident] Issue closed: #703 Reachability of NFS\-backend should be taken in account during pod scheduling

[grim harness]

netapp-ci

[trident:master] 4 new commits

a3aca40 Fix to ensure Operator's bundle and cluster rol... - ntap-arorar
afb725a Minor fixes - clintonk
89c28c4 Fix for Trident install crash when it cannot co... - arnavs7
bbcbe0a Fixed Trident Operator to use IPv6 localhost fo... - torirevilla

netapp-ci

[NetApp/trident] Issue closed: #537 mismatched types int64 and uint32 utils/osutils\_linux\.go

netapp-ci

[NetApp/trident] Issue closed: #781 Change a log level from error to warning in CheckMountOptions\(\)

[grim harness]

gnarl

[NetApp/trident] Issue closed: #802 type assertion error could occur

[grim harness]

dtrouillet

[NetApp/trident] Issue opened: #805 How add tag on NetApp Volume

Describe the solution you'd like
Add the availibilty to add tag from pvc to a NetApp Volume

Additional context
We wants to add tag on NetApp Volume to manage it easily. On NetApp I see that we can use tag on volume creation https://docs.netapp.com/us-en/ontap/fabricpool/assign-new-tag-volume-creation-task.html but cannot find anything else on Astra Trident documentation.

Regards

[grim harness]

netapp-ci

[trident:stable/v23\.01] 4 new commits

b723ace Fixed Trident Operator to use IPv6 localhost fo... - torirevilla
06aad50 Fix to ensure Operator's bundle and cluster rol... - ntap-arorar
07156fc Fix to support cloning and import of SMB volumes. - prajwalv-netapp
d9b4744 Avoid context from K8S to execCommand - mravi-na

[grim harness]

gnarl

[NetApp/trident] Issue closed: #799 release v23\.01\.0: missing clusterroles

[grim harness]

gnarl

[NetApp/trident] Issue closed: #793 Failed to resize ReadWriteMany volume online

gnarl

[NetApp/trident] Issue closed: #803 Trident \`v23\.01\.0\` ontap san works not reliable on centos7 nodes due to old multipath version

[grim harness]

netapp-ci

[trident:master] 3 new commits

655432e Avoid context from K8S to execCommand - mravi-na
c8c2a4f Fix to support cloning and import of SMB volumes. - prajwalv-netapp
eb50b8a VR REST changes (#1173) - ntap-rippy

killcity

[NetApp/trident] Issue opened: #806 Support for Talos

Will the dependency on OS binaries such as mount and mkdir, Trident cannot be used with more sophisticated/progressive operating systems like Talos. Will this dependency be lifted at some point?

[grim harness]

gorantornqvist

[NetApp/trident] Issue closed: #585 trident\-csi pods stuck in ContainerCreating after node reboots

[grim harness]

martencassel

[NetApp/trident] Issue opened: #807 Guidance on configuring NFSv3 and/or NFSv4 across host, trident and ontap

Describe the solution you'd like

Configuring NFSv3 or NFSv4 on ONTAP can quite complex task and very easily lead to misconfigurations on a multitude of places (host, ontap svcm, trident).

In many cases people just might be wants just NFSv4 to work as NFSv3. When it comes to Kerberos, not many customers i worked with use this, if they do then its because the security team mandates it. But this is perhaps another story.

In many cases there are two parties involved, the devops team ...

arndt-netapp

[NetApp/trident] Issue opened: #808 Support for Kafka over NFS via the ability to enable the ONTAP volume "\-is\-preserve\-unlink\-enabled" flag

With ONTAP 9.12.1 and higher, NFSv4.1, and Linux changes that are in RHEL 8.7 or 9.1 and higher, there are fixes to support running Kafka over NFS. There are some details about this at https://www.netapp.com/blog/simplify-apache-kafka-confluent/.

In order to enable this functionality in ONTAP, there is a new volume setting in 9.12.1 called "-is-preserve-unlink-enabled", which must be set to "true". The ask is for Trident to provide a way for this setting to be enabled so that PVCs for Ka...

[grim harness]

rakkatta424

[NetApp/trident] Issue opened: #809 podsecuritypolicy on kubernetes 1\.25 with helm deployment throwing error Error: UPGRADE FAILED: unable to build kubernetes objects

Describe the bug
A clear and concise description of what the bug is.

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: [e.g. 19.10]
• Trident installation flags used: [e.g. -d -n trident --use-custom-yaml]
• Container runtime: [e.g. Docker 19.03.1-CE]
• Kubernetes version: [e.g. 1.15.1]
• Kubernetes orchestrator: [e.g. OpenShift v3.11, Rancher v2.3.3]
• Kubernetes enabled feature gates: [e.g. CSINodeInfo]...

[grim harness]

martencassel

[NetApp/trident] Issue closed: #807 Guidance on configuring NFSv3 and/or NFSv4 across host, trident and ontap

[grim harness]

netapp-ci

[trident:master] 1 new commit

4a3534c Enable import of LUKS volumes for ontap-san - ameade

[grim harness]

pacoxu

[NetApp/trident] Pull request closed: #779 Stop using the beta\.kubernetes\.io/os

pacoxu

[NetApp/trident] Pull request reopened: #779 Stop using the beta\.kubernetes\.io/os

[grim harness]

gnarl

[NetApp/trident] Issue closed: #805 How add tag on NetApp Volume

[grim harness]

netapp-ci

[trident:master] 1 new commit

2bfbc22 Avoid context from K8S while invoking external ... - mravi-na

[grim harness]

RuairiSinkler

[NetApp/trident] Issue opened: #810 Ability to perform

Describe the solution you'd like
The ability to perform snapshot/clone operations (specifically creating a Volume Snapshot) on a volume that Trident will not try to delete at any point. E.g., being able to take a snapshot of a Volume that has been imported with the --no-manage flag.

The --no-manage flag isn't explicitly necessary, but the feature we want from that flag is to prevent Trident from deleting the backing storage if the Trident volume were to be deleted. We want to be a...

[grim harness]

tksm

[NetApp/trident] Issue opened: #811 Certain nodes cannot attach Trident volumes

Describe the bug

We occasionally have a problem that specific nodes cannot attach Trident volumes. Once it happens, it never recovers until recreating Trident Node pods.

In this situation, pods with Trident volumes get stuck in the ContainerCreating state with the following error.

Warning FailedAttachVolume 14s (x22 over 29m) attachdetach-controller AttachVolume.Attach failed for volume "pvc-310c1228-7477-4fe0-8601-e85365d42d10" : rpc error: code = NotFound desc = node...

[grim harness]

netapp-ci

[trident:master] 2 new commits

fefadd9 Implementation to map all the required pernode ... - VinayKumarHavanur
98c0d9a Changes to support arm64 - prajwalv-netapp

[grim harness]

nheinemans

[NetApp/trident] Issue opened: #812 Trident operator doesn't clean up iscsi devices after pod moved

Describe the bug
We regularly see iscsi devices with 2 failed paths on our worker nodes. In some cases, the device is active on another worker (possible because the pod moved) but in other cases the device does not exist anymore. We therefore suspect that trident operator fails to clean-up unnecessary iscsi devices on the workers.

Output of multipath -ll command:
3600a0980383147586e5d536f7839776d dm-12 NETAPP,LUN C-Mode
size=50G features='3 queue_if_no_path pg_init_retries 50' h...

[grim harness]

netapp-ci

[trident:stable/v23\.01] 3 new commits

fed3edf Avoid context from K8S while invoking external ... - mravi-na
136fe18 Implementation to map all the required per node... - VinayKumarHavanur
fb8b4da Update Changelog for 23.01.1 - torirevilla

[grim harness]

netapp-ci

[trident:master] 3 new commits

ccf9830 Fix stale localVolumeHandle in TMR after SVM na... - torirevilla
4154b18 Eliminated possibility of stuck transactions - clintonk
d11d0c6 Fixed potential type assertion issues in ONTAP ... - clintonk

[grim harness]

gnarl

[NetApp/trident] Issue closed: #699 Simplify the behavior of using different images\(Registries and image/tag overrides\) in the helm chart

[grim harness]

gnarl

[NetApp/trident] Pull request closed: #779 Stop using the beta\.kubernetes\.io/os

[grim harness]

dsouzapp

[NetApp/trident] Fork created: dsouzapp/trident

[grim harness]

gnarl

[NetApp/trident] Pull request closed: #780 Stable/v19\.11

[grim harness]

netapp-ci

[trident:stable/v23\.01] 1 new commit

c657991 23.01.1 version bump - torirevilla

[grim harness]

rikgig

[NetApp/trident] Issue opened: #813 Deleting an imported PVC / PV backed by Trident leaves other Kubernetes resources and stays in cache

Describe the bug
We are doing DR exercices that involves importing a volume multiple times in our OpenShift. When we delete the PVC from OpenShift, the volumes stays, which is ok. When we delete the volume, it cannot be imported again.
We found that there is also a TridentVolume resource that stays dangling, so we deleted it. Still the import is not working.
So last resort we recycled all the pods of Trident and then the volume was imported.

Environment

• Trident version: 2...

[grim harness]

bwanaverbecq

[NetApp/trident] Fork created: bwanaverbecq/trident

[grim harness]

netapp-ci

[trident:stable/v23\.01] 1 new commit

ad517c4 Notice file for Trident - torirevilla

[grim harness]

netapp-ci

[NetApp/trident] New release published: v23\.01\.1

netapp-ci

[NetApp/trident] New tag created: v23\.01\.1

[grim harness]

chaudhariatul

[NetApp/trident] Issue opened: #814 Resize Docker Volume with ontap\-nas and ontap\-nas\-economy

Describe the bug
Volume size cannot be updated to a new size.

Environment

• Trident version: 23.01
• Trident installation flags used:
• Container runtime: Docker CE 20.10.16
• Kubernetes version: N/A
• Kubernetes orchestrator: N/A
• Kubernetes enabled feature gates: N/A
• OS: AmazonLinux2
• NetApp backend types: AWS FSx

To Reproduce
Steps to reproduce the behavior:

1. Install docker yum -y install docker
2. Create Trident config file gp01.json

    ...

[grim harness]

yajith

[NetApp/trident] Issue opened: #815 Capability to customize readinessProbe/livenessProbe values on a Trident operator deployment

trident operator deployment doesn't provide a mechanism to customize the readinessProbe and livelinessProbe values. (Based on the feedback that we have received from NetApp support, confirmed via documentation as well)

• Documentation link below contains the customization options that are available currently.
  https://docs.netapp.com/us-en/trident-2207/trident-get-started/kubernetes-customize-deploy.html

• Documentation for tridentctl based deployment here allows more customizations.
  h...

[grim harness]

tksm

[NetApp/trident] Issue opened: #816 Missing error handling in the code of the storage drivers

Describe the bug

We found the following error handlings missing in the code of the storage drivers. Though we've never encountered problems from these in production, I would like to report this just in case.

1. err from clientAPI.ExportRuleList() in reconcileExportPolicyRules().

https://github.com/NetApp/trident/blob/37b01b8ee97fe50d19d7aeeabebb01411a85fb05/storage_drivers/ontap/ontap_common.go#L363-L365
2. err from c.ExportPolicyList() in ExportPolicyGetByName().

...

[grim harness]

temirg

[NetApp/trident] Issue opened: #817 v23\.01\.1: Error: container has runAsNonRoot and image will run as root

Describe the bug
Upgrade of trident in Rancher UI via helmchart from 22.10.0 to 23.01.1 failed

Environment
Rancher 2.7.1, RKE2 v1.24.9+rke2r2

• Trident version: 23.01.1
• Trident installation flags used:
  ** yaml **
  affinity: {}
  deploymentAnnotations: {}
  imagePullPolicy: IfNotPresent
  imagePullSecrets: null
  imageRegistry: registry.k8s.io/sig-storage
  kubeletDir: ''
  nodeSelector: {}
  operatorDebug: true
  operatorImage: docker.io/netapp/trident-operator:23.01.1
  operatorI...

[grim harness]

netapp-ci

[trident:master] 15 new commits

5565b73 Force detach for ontap-san - jwebster7
7a2d0d7 Add --kubeconfig option to tridentctl - arnavs7
00e9406 Allow node access reconciliation loop to exit i... - ameade
7a11e72 Stop HTTPs frontend as early as possible on Tri... - ameade
90fe14e Rest updates for 9 12 1 (#1255) - ntap-rippy

netapp-ci

[NetApp/trident] Issue closed: #811 Certain nodes cannot attach Trident volumes

[grim harness]

netapp-ci

[trident:master] 1 new commit

24b97e3 Generate the mock function for the interfaces O... - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

cd92152 Use svm UUID instead of name (#1270) - ntap-rippy

[grim harness]

sleepergithub

[NetApp/trident] Fork created: sleepergithub/trident

[grim harness]

netapp-ci

[trident:master] 1 new commit

4810786 Fix for RWX volume attachment to pod failing af... - arnavs7

[grim harness]

netapp-ci

[trident:master] 1 new commit

d63c6ca Add generalized name for crd yaml file as we no... - ameade

[grim harness]

netapp-ci

[trident:master] 3 new commits

9bca396 Checking in NVME related Zapi files to Trident - bhatnag
fe28774 Generic controller handlers for CRs - ameade
13412e6 Change logic to determine if a device is alread... - ameade

[grim harness]

netapp-ci

[trident:master] 1 new commit

d0d7b4b Rename node publication state flags - jwebster7

[grim harness]

igibek

[NetApp/trident] Issue opened: #818 Reporting a vulnerability

Hello!

I hope you are doing well!

We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called Private vulnerability reporting, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.

Can you enable it, so that we can report it?

Thanks in advance!

PS: you can read about how to enable private vulnerability re...

[grim harness]

netapp-ci

[trident:master] 2 new commits

0be226b Truncate lengthy per-node igroups - jwebster7
ffdbd7e Allow ReadWriteOncePod access mode for PVCs - ameade

[grim harness]

netapp-ci

[trident:master] 1 new commit

e8c1b09 Fixes single platform operator image tag - reederc42

[grim harness]

netapp-ci

[trident:master] 1 new commit

22d1b4e Updated 3rd-party dependencies for 23.04.0 release - clintonk

[grim harness]

KuldeepSharmaTR

[NetApp/trident] Issue opened: #819 K8S PSP getting created after setting excludePodSecurityPolicy to true

Describe the bug
A clear and concise description of what the bug is.

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 23.01.1
• Trident installation flags used: Using Helm
• Container runtime: containerd
• Kubernetes version: 1.23
• Kubernetes orchestrator: EKS 1.23
• Kubernetes enabled feature gates: [e.g. CSINodeInfo]
• OS: Amazon Linux
• NetApp backend types: [e.g. CVS for AWS, ONTAP AFF 9.5, HCI 1....

[grim harness]

mmcalcagni

[NetApp/trident] Issue opened: #820 Ugrade backend question

I have some trident backends for which I would like to introduce new attributes to limit the size of the volumes that are generated. The parameters in question are the following: limitAggregateUsage and limitVolumeSize. Could there be any impact or disruption as far as the pods present?

I guess not, but would like to confirm.
Thanks

[grim harness]

netapp-ci

[trident:master] 1 new commit

ab72373 Updating the minimum version for ONTAP REST sup... - ntap-rippy

[grim harness]

gnarl

[NetApp/trident] Issue closed: #820 Ugrade backend question

[grim harness]

netapp-ci

[trident:master] 4 new commits

a98e529 Get publications by node during delete volume - jwebster7
17cde81 Added fix to list all the iSCSI igroup names as... - agagan
bbdc1c4 Refactor CRD controller to use common handlers - ameade
15a2878 Switching ZAPI call parameters (#1306) - ntap-rippy

[grim harness]

netapp-ci

[trident:stable/v23\.04] 2 new commits

b3dad27 All ontap-san-* volumes use per-node igroups, a... - reederc42
1b32a06 stable/v23.04 - bassplay3r

netapp-ci

[NetApp/trident] New branch created: stable/v23\.04

[grim harness]

netapp-ci

[trident:stable\-v23\.04\-changelog] 1 new commit

0b419b0 cherry-pick changes from master changelog - jwebster7

netapp-ci

[NetApp/trident] New branch created: stable\-v23\.04\-changelog

[grim harness]

netapp-ci

[trident:stable\-v23\.04\-changelog] 3 new commits

0580d7f fix issue number - jwebster7
a92981b note about build - reederc42
d84ce5a collapse SMB entries into one; add arm64 issue ... - jwebster7

[grim harness]

gnarl

[NetApp/trident] Issue closed: #758 Enable Per\-node igroup for ontap\-san\-economy

gnarl

[NetApp/trident] Issue closed: #732 Support NetAPP trident on ARM architecture

gnarl

[NetApp/trident] Issue closed: #796 Support for Windows Containers on Windows Server 2022 for on\-premises \- ontap

[grim harness]

netapp-ci

[trident:stable\-v23\.04\-changelog] 2 new commits

efade41 adjust SMB share support entry - jwebster7
c7df4b7 adjust SMB entries once more - jwebster7

[grim harness]

netapp-ci

[trident:stable\-v23\.04\-changelog] 5 new commits

95e2277 fix space in nas-economy driver - jwebster7
ba8da68 adjust arm64 support entry - jwebster7
e263fcd Revert "adjust arm64 support entry" - jwebster7
1c65548 adjust arm64 entry - jwebster7
98726d5 adjust arm entry again - jwebster7

[grim harness]

netapp-ci

[trident:stable/v23\.04] 1 new commit

5ce2d98 Update changelog for 23.04 - jwebster7

[grim harness]

netapp-ci

[trident:stable/v23\.04] 1 new commit

1f5192c fix unmanaged import for SAN drivers - reederc42

[grim harness]

netapp-ci

[trident:stable/v23\.04] 1 new commit

08aa639 Notice files and ASUP bump to 23.04 - torirevilla

[grim harness]

netapp-ci

[NetApp/trident] New release published: v23\.04\.0

netapp-ci

[NetApp/trident] New tag created: v23\.04\.0

[grim harness]

netapp-ci

[trident:master] 3 new commits

b3dad27 All ontap-san-* volumes use per-node igroups, a... - reederc42
13bc889 Update changelog for 23.04 - jwebster7
370c0e6 fix unmanaged import for SAN drivers - reederc42

[grim harness]

MaxRink

[NetApp/trident] Issue opened: #821 Publish Helm chart as OCI

Describe the solution you'd like
Currently the helm charts are only distributed in legacy format.
We would like to see them also getting distributed as OCI charts as some registries stared to deprecate the legacy format already
Describe alternatives you've considered

Additional context
https://helm.sh/docs/topics/registries/

[grim harness]

dbarreda

[NetApp/trident] Issue opened: #822 Utilize limitAggregateUsage without cluster administrator rights

Describe the solution you'd like
limitAggregateUsage currently won't work if credentials do not have cluster admin permissions. It does makes sense that it needs cluster permissions but cluster admin seems like a lot of permissions when the SVM is specifically done for this.

Maybe some cluster-viewer role?

Describe alternatives you've considered
None with out current practiices.

Additional context
N/A

[grim harness]

netapp-ci

[trident:master] 3 new commits

eaedb6c Increase Code Coverage of ONTAP NAS FlexGroup D... - agagan
1d4a902 Improve log tracing in frontends - clintonk
458db05 Reconcile backend state - mravi-na

[grim harness]

netapp-ci

[trident:master] 1 new commit

9845d2e The fix for reducing the ONTAP-NAS-Flexgroup UT... - agagan

[grim harness]

rageanilkumar

[NetApp/trident] Issue opened: #823 Problem initializing storage driver 'ontap\-san'

Trying to deploy backend-tbc-ontap-san.yaml but it's throwing some errors with Problem initializing storage driver 'ontap-san'

PFB YAML FILE of backend-tbc-ontap-san.yaml:

apiVersion: v1
kind: Secret
metadata:
name: backend-fsx-ontap-san-secret
type: Opaque
stringData:
username: ZnN4YWRtaW4=
password: cHJpbWVmb2N1c0AyMDIwJA==

apiVersion: trident.netapp.io/v1
kind: TridentBackendConfig
metadata:
name: backend-fsx-ontap-san
spec:
version: 1
storageDriverName...

[grim harness]

ghermana

[NetApp/trident] Issue opened: #824 Trident operator request/limit in the Helm charts

Can you please add recommended (or estimates) values for the CPU and memory request and limit for the Helm chart?

This would help by providing base values to be used in capacity estimates.

[grim harness]

netapp-ci

[trident:master] 4 new commits

4c9a2c2 Add errors package - jwebster7
7221bdc deprecated ioutil pkg code moved to appropriate... - mravi-na
4750064 Add command interface - jwebster7
30dba61 Switching to YAML safe loading in these develop... - ntap-rippy

[grim harness]

gnarl

[NetApp/trident] Issue closed: #816 Missing error handling in the code of the storage drivers

[grim harness]

IQ-SCM

[NetApp/trident] Fork created: IQ-SCM/trident

[grim harness]

shtinkerim

[NetApp/trident] Fork created: shtinkerim/trident

shtinkerim

[NetApp/trident] Pull request opened: #825 This is a security research, please do not approve, thank you\. edulpa

This is a security research, please do not approve, thank you. edulpa

[grim harness]

netapp-ci

[trident:master] 3 new commits

40e0cd2 TridentActionMirrorUpdate CRD and controller - torirevilla
f484dad Added support for create/delete and publish/unp... - bhatnag
dd1b459 Narrowing the check (#1347) - ntap-rippy

[grim harness]

starlightromero

[NetApp/trident] Fork created: starlightromero/trident

starlightromero

[NetApp/trident] Pull request opened: #826 feat\(pdb\): add optional podDisruptionBudget to deployment

Change description

Add optional podDisruptionBudget to deployment

Project tracking

n/a

Do any added TODOs have an issue in the backlog?

n/a

Did you add unit tests? Why not?

n/a - Helm chart change

Does this code need functional testing?

No, tested locally

Is a code review walkthrough needed? why or why not?

No, small change

Should additional test coverage be executed in addition to pre-merge?

No

Does this code need a note in the c...

[grim harness]

netapp-ci

[trident:master] 2 new commits

7200dc5 UTs for nvme_linux.go and some minor code impro... - bhatnag
610c1dd Refactor reconcile type errors - ameade

[grim harness]

netapp-ci

[trident:master] 1 new commit

38dde4c Refactor not found errors - jwebster7

[grim harness]

netapp-ci

[trident:master] 2 new commits

0972c44 Removed obsolete installer code - clintonk
2131aca Increase Code Coverage of ONTAP SAN Driver - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

721e447 Remove obsolete pre-CSI code - clintonk

[grim harness]

netapp-ci

[trident:master] 1 new commit

e3527b7 TRID 12247 ONTAP NAS Qtree Unit Tests (#1326) - aparna0508

[grim harness]

burkhat

[NetApp/trident] Issue opened: #827 Windows SMB mount error \- "empty username or password is not allowed"

Describe the bug
Hello, we've update our Trident to 23.04 and enabled Windows Support.
Because of Windows doesn't support NFS we have created a new backend with SMB and a StorageClass which is using the new backend.
Creating a new share works without any problem, but if we want to mount the share within Windows Container, we got following error message:
MountVolume.MountDevice failed for volume "pvc-5832aba1-54ff-4040-9ec0-bbed6a2b4056" : rpc error: code = Internal desc = error mo...

[grim harness]

netapp-ci

[trident] Branch master was force-pushed to `e71ed09`

Compare changes

[grim harness]

netapp-ci

[trident:master] 1 new commit

0fe529e Refactor found errors - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

45fc576 NVMe snap and clone - bhatnag

[grim harness]

burkhat

[NetApp/trident] Issue opened: #828 Helm Trident Operator \- "tridentNodePluginTolerations" will not be used for Windows Daemonset

Describe the bug
We're using the latest helm version 23.4.0 to rollout the trident operator with windows support.
In Openshift it is necessary to set tolerations in the Windows DaemonSet that Pods gets started.

We tried following config in the values.yaml:

tridentNodePluginTolerations:
  - operator: Exists
    effect: NoExecute
  - operator: Exists
    effect: NoSchedule

But the toleration will only be set in the Linux DaemonSet and not in the Windows DaemonSet.
...

[grim harness]

cvvz

[NetApp/trident] Fork created: cvvz/trident

[grim harness]

cvvz

[NetApp/trident] Pull request opened: #829 feat\(Azure\): support azure managed identity credentials

Change description

feat: support azure manged identity credentials

Project tracking

N/A

Do any added TODOs have an issue in the backlog?

N/A

Did you add unit tests? Why not?

No ut for the entire function.

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a note in the changelog?

feat(Azure): su...

andyzhangx

[NetApp/trident] Pull request review submitted: #829 \[WIP\]feat\(Azure\): support azure managed identity credentials

andyzhangx

[NetApp/trident] New review comment on pull request #829: \[WIP\]feat\(Azure\): support azure managed identity credentials

in this case, ClientID is actually userAssignedIdentityID in azure.json?

cvvz

[NetApp/trident] Pull request review submitted: #829 \[WIP\]feat\(Azure\): support azure managed identity credentials

cvvz

[NetApp/trident] New review comment on pull request #829: \[WIP\]feat\(Azure\): support azure managed identity credentials

Yes, they are the same

andyzhangx

[NetApp/trident] New review comment on pull request #829: \[WIP\]feat\(Azure\): support azure managed identity credentials

we could keep this change if end user only provides userAssignedIdentityID in backend secret, and for best convenience, we should leverage /etc/kubernetes/azure.json to get userAssignedIdentityID since it's already there on every AKS cluster.

andyzhangx

[NetApp/trident] Pull request review submitted: #829 \[WIP\]feat\(Azure\): support azure managed identity credentials

[grim harness]

netapp-ci

[trident:master] 2 new commits

3527955 Added in-place snapshot restore feature - clintonk
9b5cadf Corrected NVMe subsystem connect - sphadnis007

[grim harness]

netapp-ci

[trident:master] 1 new commit

d3c5474 NVMe volume import - bhatnag

[grim harness]

netapp-ci

[trident:master] 1 new commit

1b645ad Drops all Linux capabilities from containers; n... - reederc42

netapp-ci

[trident:master] 1 new commit

6ccf1ea Implement mirror update - torirevilla

[grim harness]

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

what if AZURE_CREDENTIAL_FILE not defined? default value should be /etc/kubernetes/azure.json

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

the logic should be if backend secret is defined, then only use backend secret to get credentials, if not, then use /etc/kubernetes/azure.json by default.

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

the azure.json could also contain service principal in clientID and clientSecret, so the logic could be: if backend secret is not defined, then parse azure.jjson file to get credentials.

cvvz

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

cvvz

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

Yes, however, I didn't find any avalaible method in cloud-provider-azure that can parse the credential file and return corresponding credential. I will see if I can make it in cloud-provider-azure SDK.

cvvz

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

cvvz

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

OK, currect logic is just the opposite.

cvvz

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

cvvz

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

The AZURE_CREDENTIAL_FILE env is injected by trident operator, it won't be empty if it is deployed on AKS, otherwise it is not running on AKS.

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

the cloud provider config parsing using old sdk is here: https://github.com/kubernetes-sigs/cloud-provider-azure/blob/470a363a5dbb295bd1123d9cf8cb0e34ac87b032/pkg/provider/config/azure_auth.go#L95, the parsing logic should be the same

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

maybe we could leverage the sdk 2 parsing code directly: https://github.com/kubernetes-sigs/cloud-provider-azure/blob/470a363a5dbb295bd1123d9cf8cb0e34ac87b032/pkg/azclient/auth.go
cc @MartinForReal

[grim harness]

cvvz

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

Yes, I've made some changes to the code. However, there seems like some problems when using go-armbalancer, without it everything is ok. I'm investigating in it.

cvvz

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

[grim harness]

netapp-ci

[trident:master] 1 new commit

e2e12f8 Trident upgrade to continue even if pods from t... - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

977441d REST fixes for quota resize (#1361) - ntap-rippy

[grim harness]

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

add a comment about the auth logic here.

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

use managed identity credential: ClientID is the managed identity ID

[grim harness]

MartinForReal

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

MartinForReal

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

I think the logic is covered in https://github.com/kubernetes-sigs/cloud-provider-azure/blob/e1e1b0f37fea5383db5191595c9327cbc35c44a5/pkg/azclient/auth.go#L120

cvvz

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

cvvz

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

This clientSecret and clientID are from an external configuration if user configured explicitly, not from azure.json. If users rely on azure.json for authentication, we uses authProvider.GetAzIdentity() to get credential.

[grim harness]

MartinForReal

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support azure managed identity credentials

MartinForReal

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support azure managed identity credentials

clientid client secret can be assigned to authconfig struct and then we can create auth provider using this config...

[grim harness]

cvvz

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support getting credentials from azure auth config

cvvz

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support getting credentials from azure auth config

That's right, I've made changes to the PR.

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat\(Azure\): support getting credentials from azure auth config

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat\(Azure\): support getting credentials from azure auth config

more graceful way is return authProvider.GetAzIdentity()

[grim harness]

netapp-ci

[trident:master] 1 new commit

de86e2c Fixing extraction of NVMe namespace Name and cr... - bhatnag

[grim harness]

temirg

[NetApp/trident] Issue closed: #817 v23\.01\.1: Error: container has runAsNonRoot and image will run as root

[grim harness]

cvvz

[NetApp/trident] Pull request opened: #830 feat: Incoporate azure resources

Change description

feat: Incoporate azure resources

Create netapp account, capability pool, and subnet when they are not found.

Project tracking

Do any added TODOs have an issue in the backlog?

Did you add unit tests? Why not?

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a note in the c...

[grim harness]

andyzhangx

[NetApp/trident] Pull request review submitted: #830 feat\(Azure\): Incorporate azure resources

could you add more details in the PR description? .e.g.
currently we need to create netapp account, netapp volumes, configure vnet, what will this PR do?
https://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-nfs

also there is smb volume, how to deal with that?

[grim harness]

netapp-ci

[trident:master] 2 new commits

3a85520 NAS Eco: create and Delete Qtree snapshots. - VinayKumarHavanur
655d9b4 Fixed ANF driver to try all eligible capacity p... - clintonk

[grim harness]

mac-chaffee

[NetApp/trident] Issue opened: #831 Restore Kustomize support - rename kustomization_post_1_25.yaml

Describe the bug
I install Trident using Kustomize by creating a kustomization.yaml file like this:

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- github.com/NetApp/trident/deploy?ref=v22.10.0
- snapshot-class.yaml
- trident-storage-classes.yaml
- trident-orchestrator.yaml

This works since Kustomize supports fetching the root kustomization.yaml file from a git repo at a specific path and ref. However, the file MUST be named "kustomi...

[grim harness]

netapp-ci

[trident:master] 1 new commit

0cefdf6 Adding extra checks for existence before use (#... - ntap-rippy

[grim harness]

burkhat

[NetApp/trident] Issue opened: #832 Windows SMB Mount Error with ONTAP-NAS-ECONOMY driver

Describe the bug
Hello,
we've created a Trident SMB Backend with storageDriverName "ontap-nas-economy".

apiVersion: trident.netapp.io/v1
kind: TridentBackendConfig
metadata:
  name: backend-tbc-ontap-nas-economy-smb-s-mu40-trident0
  namespace: trident
spec:
  credentials:
    name: trident-backend
  dataLIF: 10.0.3.27
  labels:
    netapp: S-MU40-trident0-smb
  managementLIF: 10.0.3.25
  nasType: smb
  storageDriverName: ontap-nas-economy
  svm: S-MU40-trident0
...

[grim harness]

netapp-ci

[trident:master] 1 new commit

f9c1958 Allow volume replication within a single SVM - torirevilla

[grim harness]

netapp-ci

[trident:master] 1 new commit

e20f1da Move Trident to Go 1.20 (#1368) - ntap-rippy

[grim harness]

netapp-ci

[trident:master] 1 new commit

5826e5c Support mounting RO snapshots in ANF - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

1152424 Support snapshot import - coffeefreak101

[grim harness]

netapp-ci

[trident:master] 1 new commit

1c1fedd The trident operator install fails when taints ... - agagan

[grim harness]

melck

[NetApp/trident] Issue opened: #833 Docker plugin: Debugging not working since 23:04

Describe the bug
I have no debug log when i set debug=true with docker plugin in trident version 23.04.

Environment
OS: Debian 11
Docker: docker-ce:24.0.2-1~debian.11~bullseye
Trident: 23.04
Netapp backend ONTAP 9.11

To Reproduce

• docker plugin install netapp/trident-plugin:23:04 --alias netapp debug=true
• journalctl -u docker

Expected behavior

I'm suppose too some level=debug on logs.

Additional context

I saw [this line](https://githu...

[grim harness]

tgoetheyn

[NetApp/trident] Issue opened: #834 Expand PVC used VolumeSize and ignored Snapshot reserve

Describe the bug
Fails to expand PVC if the new requested size is smaller than the total volume size.
This should be calculated on the DataSize instead (= Volume size - SnapshotReserve)

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 22.10
• Trident installation flags used: Default install through Helm
• Container runtime: [e.g. Docker 19.03.1-CE]
• Kubernetes version: v1.25.8+37a9a08
• Kubernetes orche...

[grim harness]

netapp-ci

[trident:master] 2 new commits

0df8ac7 Use more efficient snapshot lookups; by name, r... - ntap-rippy
6d30a16 allows controller to run as root and allows dae... - reederc42

[grim harness]

netapp-ci

[trident:master] 1 new commit

b2bad7d Adding another check for FlexGroup clone existe... - ntap-rippy

[grim harness]

netapp-ci

[trident:master] 1 new commit

75dd05c Mask display of volume/snapshot state if 'oniline' - mravi-na

[grim harness]

netapp-ci

[trident:master] 1 new commit

7f1cf4d Release sync VR relationship during reestablish - torirevilla

[grim harness]

netapp-ci

[trident:master] 1 new commit

3a5f29a NVMe self healing - sphadnis007

[grim harness]

lindhe

[NetApp/trident] Fork created: lindhe/trident

[grim harness]

lindhe

[NetApp/trident] Pull request opened: #835 Set namespace in commands in chart notes

Change description

This change explicitly sets the namespace in the commands suggested in the chart's NOTES.txt file, which are rendered upon installation.
Before this change, the namespace was not included so the commands would generally not work without modification.

Did you add unit tests? Why not?

No, this is a trivial change and a change to what basically amounts to documentation, nonetheless.

Does this code need functional testing?

No.

Is a code rev...

[grim harness]

netapp-ci

[trident:master] 1 new commit

b6dc968 NAS Economy snapshot restore in Read-Only mode. - VinayKumarHavanur

[grim harness]

andyzhangx

[NetApp/trident] Pull request review submitted: #830 feat(Azure): Incorporate azure resources

let's first merge https://github.com/NetApp/trident/pull/829 first since this PR depends on that PR, and also provide a feature flag to decide whether doing following things automatically, by default it's true, and user could disable it if there is sth. wrong:

Create a netapp account
Create capacity pool
Create subnet and delegate to Azure NetApp Files

[grim harness]

andyzhangx

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

andyzhangx

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

strings.EqualsFold

and also could you provide an example how to set this cloudProvider

[grim harness]

bromaniac

[NetApp/trident] Issue opened: #836 Trident reports offline volume as online

Describe the bug
tridentctl reports state of backend volume as online when it isn't.

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 23.01.1
• Trident installation flags used: default Helm install
• Container runtime: cri-o://1.24.5-2.rhaos4.11.gitb007cb6.el8
• Kubernetes version: v1.24.12+8f6c8a6
• Kubernetes orchestrator: OpenShift 4.11.35
• Kubernetes enabled feature gates:
• OS: Red Hat Enterprise ...

[grim harness]

netapp-ci

[trident:master] 1 new commit

ee2d974 Modify SCC allowed capabilities for OCP 4.13 (#... - porrua

[grim harness]

cvvz

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

cvvz

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

I added a value named cloudProvider in helm/trident-operator/values.yaml. Deploy with helm option --set cloudProvider=.

[grim harness]

lindhe

[NetApp/trident] Issue opened: #837 Duplicate RBAC entries for the `namespaces` resource

Describe the bug
There exists duplicate entries for the namespace resource in the trident-operator ClusterRole:

https://github.com/NetApp/trident/blob/ee2d9743551c82635d411da878389ffbd9f5f655/helm/trident-operator/templates/clusterrole.yaml#L10-L16

https://github.com/NetApp/trident/blob/ee2d9743551c82635d411da878389ffbd9f5f655/helm/trident-operator/templates/clusterrole.yaml#L244-L250

This makes it harder than necessary to review what permissions are granted to the applicati...

[grim harness]

VfBfoerst

[NetApp/trident] Issue opened: #838 "Unable to attach or mount volumes: unmounted volumes" in Openshift 4.13

Describe the bug
After configuring the trident operator in openshift (4.13) and the ontap netapps, we are unable to mount the volume in any pod. The PVC and PV are succesfully created, but the pod description provides the following error messages:
oc describe pod x

  Normal   SuccessfulAttachVolume  11m                    attachdetach-controller  AttachVolume.Attach succeeded for volume "pvc-249dbf83-410c-4421-929e-a8b3c93119db"
  Warning  FailedMount             3m21s (x4 ...

[grim harness]

lindhe

[NetApp/trident] Issue opened: #839 The Trident operator fails to install via Helm on Rancher

Describe the bug

When installing the Trident operator from the Helm chart in a Kubernetes cluster managed by Rancher, the operator fails because it is unable to add the PSA label pod-security.kubernetes.io/enforce: privileged on its installation namespace. This is because Rancher has a special admission webhook in place for setting PSA labels, which must be granted to the ServiceAccount, on top of all the other RBAC rules it needs.

Environment

• Trident version: 23.04.0
• ...

[grim harness]

VfBfoerst

[NetApp/trident] Issue closed: #838 "Unable to attach or mount volumes: unmounted volumes" in Openshift 4.13

[grim harness]

lindhe

[NetApp/trident] Pull request opened: #840 Allow operator to set PSA in Rancher

Change description

In Rancher, it is not enough to have patch permissions for a namespace in order to set PSA labels.
It is also required to have the updatepsa permission on the projects resource, as outlined
here.

This rule allows the Trident operator to set the PSA label pod-security.kubernetes.io/enforce: privileged on its installation namespace in Rancher.

Project tracking

I have no insight to your interna...

lindhe

[NetApp/trident] Issue opened: #841 Trident operator doesn't clean up during uninstall

Describe the bug

After uninstalling the Trident operator (using Helm), I find that there are multiple CR and CRDs left. This is pretty annoying since the lingering resources still have finalizers on them preventing them from being deleted. So before I can delete the namespace to remove the resources, I have to edit each resource and clear its finalizer manually. I can thereafter remove the namespace ...

[grim harness]

mreiche

[NetApp/trident] Issue opened: #842 trident-operator v23.04.0 still creates PodSecurityPolicy even when disabled

I've installed trident via helm chart with values.yml

excludePodSecurityPolicy: true

But the trident-operator pod is still creating them

level=info msg="A Trident pod security policy was found by label." podSecurityPolicy=trident-node-linux
level=debug msg="Patching Trident Pod security policy." podSecurityPolicy=trident-node-linux
W0706 14:02:52.097195 1 warnings.go:70] policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
W0706 14:02:5...

[grim harness]

netapp-ci

[trident:master] 2 new commits

c2683f9 Skips single platform retagging if images are n... - reederc42
db499f3 Fixing NVMe bugs - bhatnag

[grim harness]

netapp-ci

[trident:master] 1 new commit

205b6a8 Support for RO clone in ONTAP-NAS - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

9b8f3df Add LUN Serial Number Check - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 1 new commit

833ed19 Added support for backend state update for NVMe... - sphadnis007

[grim harness]

netapp-ci

[trident] Branch master was force-pushed to `06a56a4`

Compare changes

[grim harness]

netapp-ci

[trident:master] 1 new commit

561e2cb OsType cannot be specified in a LUN clone POST ... - ntap-rippy

[grim harness]

netapp-ci

[trident:master] 1 new commit

62f1f80 Fixing this REST call, the initiator name needs... - ntap-rippy

[grim harness]

mreiche

[NetApp/trident] Issue opened: #843 trident-controller main won't start with `chmod /plugin/: operation not permitted`

I've upgraded to Trident v23.04 via helm and got the following error in the trident-controller pod in main container:

chmod /plugin/: operation not permitted

leaving the pod in CrashLoopBackOff.

The article [1] says it may be related to the helm chart and I should install via tridentctl.

First try

• I removed trident v23.04 via helm
• I reinstalled trident v23.04 via tridentctl
• Nothing changed

Trial and Error

• I disabled SELinux via `setentforce p...

mreiche

[NetApp/trident] Issue closed: #842 trident-operator v23.04.0 still creates PodSecurityPolicy even when disabled

[grim harness]

rohitssingh

[NetApp/trident] Issue opened: #844 Mount 32 Failure During Upgrade from Trident 22.10 to Trident 23.01

We have encountered an issue during the upgrade of our environment that results in specific upgraded pods being unable to mount volumes intermittently (~50% of the time).

Describe the bug
After software on a kubernetes node is upgraded (where Trident goes from 22.10 to 23.01), we encountered an issue
whereby the underlying volume is unable to mount.

This issue is encountered on a PV that is "multi-mounted" - that is, two separate pods running on the same node are accessing the sam...

[grim harness]

netapp-ci

[trident:master] 4 new commits

eca6268 Add backend pool reporting to all ONTAP drivers - jwebster7
2f52e48 Imported snapshots shall have the same "managed... - ameade
550c776 Increase the client rate limit to reduce the ti... - agagan
35d6f5f Update Trident version to 23.07 - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

6bd58b9 Updated 3rd-party dependencies for 23.07.0 release - clintonk

[grim harness]

netapp-ci

[trident:master] 1 new commit

724169b Feature gate for 23.07 Trident features - VinayKumarHavanur

[grim harness]

gnarl

[NetApp/trident] Issue closed: #795 Trident Operator does not work with node taints

[grim harness]

vveeregandha

[NetApp/trident] Issue opened: #845 Trident v22.10 - mount.nfs: access denied by server while mounting

Describe the bug
As the latest Trident releases auto export the subnet to the export policy for the target volume, we are still seeing access denied errors randomly on some of the nodes in our Kubernetes 1.22 cluster. The issue goes away when we restart the trident pod on the particular node where the issue is seen.

Environment
Kubernetes 1.22 cluster, os on the nodes: ubuntu 20.04

• Trident version: 22.10
• Container runtime: contained v1.6.4
• Kubernetes version: v1.22.8
  ...

[grim harness]

MaxGer

[NetApp/trident] Issue closed: #696 VolumeSnapshots: Missing Limitations for VolumeClasses if those don't support snapshots

[grim harness]

clintonk

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

@cvvz, thank you for this effort so far. We see the value and would like to pursue it. I've left some initial questions.

clintonk

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

It is possible to detect the cloud provider automatically using the instance metadata service, and that could be done just in time in the storage driver layer if credentials aren't provided. Is there a reason we should or shouldn't do that instead of this explicit cloud provider installation argument?

clintonk

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

Curious why the Makefile changes are needed. Is this stanza somehow broken?

clintonk

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

This code seems to be duplicated between the two ANF drivers. I hope we can dry that up and support with unit tests.

[grim harness]

clintonk

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

clintonk

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

I suppose it's too late after running tridentctl install, since we need the host volume mount at install time to get access to azure.json. But the operator runs in the cluster and could make that determination automatically, right?

https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service?tabs=linux

[grim harness]

vitaly-zverev

[NetApp/trident] Fork created: vitaly-zverev/trident

[grim harness]

netapp-ci

[trident:master] 2 new commits

5680f76 Add check for volume state in REST clone create... - ntap-rippy
616b3f8 Add multipath serial and size checks; enhance u... - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 1 new commit

d9550d8 Bump ASUP version to 23.04 - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

8642bee Revert publish info field from rawDevicePath to... - ntap-arorar

[grim harness]

netapp-ci

[trident:stable/v23.07] 1 new commit

9965ca4 stable/v23.07 - bassplay3r

netapp-ci

[NetApp/trident] New branch created: stable/v23.07

[grim harness]

netapp-ci

[trident:master] 1 new commit

fd4540c Revert publish info field from rawDevicePath to... - ntap-arorar

[grim harness]

AlpineCoder

[NetApp/trident] Issue opened: #846 RestClient.VolumeList sometimes returns incomplete result

Describe the bug
I played around with the code of the ONTAP storage driver and discovered that RestClient.VolumeList sometimes returned inconsistent results if a large number of volumes (> 300 in my case) is involved.

Number of records in storage.VolumeCollectionGetOK.Payload.NumRecords is correct, however length of the storage.VolumeCollectionGetOK,Payl...

[grim harness]

netapp-ci

[trident:master] 1 new commit

3a7cae7 Implementation to restrict snapshot deletion if... - VinayKumarHavanur

[grim harness]

netapp-ci

[trident:stable/v23.07] 1 new commit

34c7715 Revert publish info field from rawDevicePath to... - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 1 new commit

31c02b2 Add backend pool reporting to Solidfire driver - jwebster7

[grim harness]

cvvz

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

cvvz

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

Yes, you could run make k8s_codegen_operator on your local machine without this change and it will fail.

[grim harness]

cvvz

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

cvvz

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

Yes, it is possible for operator to know which cloud provider is being used automatically. However, I think setting it manually in helm chart is easy to use and it doesn't rely on any external service. We can also add similar option in tridentctl install in the future.

[grim harness]

cvvz

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

cvvz

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

Agree. However, there are many other duplications between NASBlockStorageDriver and NASStorageDriver not only this code snippet, even the whole initializeAzureSDKClient method is almost the same between NASBlockStorageDriver and NASStorageDriver. So, I think it's better to eliminate the duplication totally in other separate PR, which is an enhancement, and keep the implementation in this PR consistent with the current.

[grim harness]

clintonk

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

clintonk

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

Another question...can this be tested in an Azure VM that isn't part of an AKS cluster?

[grim harness]

cvvz

[NetApp/trident] Pull request review submitted: #829 feat(Azure): support getting credentials from azure auth config

cvvz

[NetApp/trident] New review comment on pull request #829: feat(Azure): support getting credentials from azure auth config

Nope, we rely on "/etc/kubernetes/azure.json" on the Node, which is generated by AKS component, Azure VM doesn't exist this file.

[grim harness]

staerion

[NetApp/trident] Fork created: staerion/trident

[grim harness]

netapp-ci

[trident:stable/v23.07] 1 new commit

a7b070b Redacts CHAP password in logs - reederc42

[grim harness]

netapp-ci

[trident:master] 4 new commits

ac738c3 Add backend pool reporting to GCP driver - jwebster7
6062f0b Disable feature gates - VinayKumarHavanur
3889a7d Fixes for github issue (#1425) - ntap-rippy
888b078 23.07 changelog - torirevilla

[grim harness]

netapp-ci

[trident:stable/v23.07] 1 new commit

e234492 23.07 changelog - torirevilla

[grim harness]

gnarl

[NetApp/trident] Issue closed: #844 Mount 32 Failure During Upgrade from Trident 22.10 to Trident 23.01

Jibbscript

[NetApp/trident] Fork created: Jibbscript/trident

[grim harness]

testwill

[NetApp/trident] Fork created: testwill/trident

testwill

[NetApp/trident] Pull request opened: #847 chore: unnecessary use of fmt.Sprintf

Change description

remove unnecessary use of fmt.Sprintf

Project tracking

Do any added TODOs have an issue in the backlog?

Did you add unit tests? Why not?

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a note in the changelog?

Does this code require documentation changes?

#...

[grim harness]

netapp-ci

[trident:master] 1 new commit

976123a Add backend pool reporting to all ANF drivers - jwebster7

[grim harness]

staerion

[NetApp/trident] Pull request opened: #848 add option for operator to set resource claims on daemonset containers

Change description

Project tracking

Do any added TODOs have an issue in the backlog?

Did you add unit tests? Why not?

Does this code need functional testing?

Is a code review walkthrough needed? why or why not?

Should additional test coverage be executed in addition to pre-merge?

Does this code need a note in the changelog?

Does this code require documentation changes?

Additional Information

[grim harness]

alifelan

[NetApp/trident] Issue opened: #849 tridentctl import cannot mount LUKS encrypted volumes in backend without LUKS as a default

Describe the bug
When having a backend with two virtual pools, one for LUKS and one for non LUKS, and a default without LUKS, we can create LUKS encrypted volumes. Then, we can create a snapshot of the volume. But when we try to import the volume with tridentctl import, the import itself succeeds, but the volume cannot be mounted to a pod due to the following error:

kubelet  MountVolume.MountDevice failed for volume "pvc-72b02d9a-3198-47c2-8318-5a85a858036c" : rpc error: code...

[grim harness]

netapp-ci

[trident:stable/v23.07] 2 new commits

5762ef1 Stable notice files 23.07 - torirevilla
92860ce Bump ASUP version for 23.07 - jwebster7

[grim harness]

netapp-ci

[NetApp/trident] New release published: v23.07.0

bassplay3r

[NetApp/trident] New tag created: v23.07.0

[grim harness]

netapp-ci

[trident:master] 2 new commits

4b65b10 Fixed the dateCreated field showing lun name in... - shashank-netapp
6cd8a07 bump ASUP version to 23.07 - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

cdcdd23 Bump version to 23.10 - jwebster7

[grim harness]

alifelan

[NetApp/trident] Fork created: alifelan/trident

[grim harness]

alifelan

[NetApp/trident] Pull request opened: #850 Dynamic luks support

Enable setting the luks option in a volume config based on the parameters from the create volume request

To address #849, we followed an approach where we parse the selectors from the create volume request. After that is done, we get the luks selector, and if it has a value, we assigned it to the volume config. To keep previous functionality, if this value is not set, it will be set to the default from the backend in the ontap san driver.

An issue with this approach is that even thou...

[grim harness]

netapp-ci

[trident:master] 1 new commit

9602d97 NVMe unstage on device errors - mravi-na

[grim harness]

shankarpentyala07

[NetApp/trident] Issue opened: #851 trident-csi 23.4.0 will not startup on openshift 4.10 FIPS Enabled cluster

We see the trident-csi not starting up with this error messages in the log:

remote error: tls: protocol version not supported

trident-controller-856b7f5cdb-2fcfh   6/6     Running            0                 7h7m
trident-node-linux-2h46k              1/2     CrashLoopBackOff   169 (3m31s ago)   7h57m
trident-node-linux-2xglg              1/2     CrashLoopBackOff   165 (75s ago)     7h57m
trident-node-linux-2xk2r              1/2     CrashLoopBackOff   169 (36s ago)     7h57m
...

[grim harness]

netapp-ci

[trident:master] 1 new commit

7270530 NVMe: Adding support for NDVP - bhatnag

[grim harness]

ysakashita

[NetApp/trident] Issue opened: #852 fsGroup founction is not working in ReadWriteOncePod

Describe the bug
The fsGroup founction is not working in ReadWriteOncePod’s PV.
See the following results.

$ cat sts.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: test-access-mode-pod
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: test-access-mode-pod
  serviceName: test-access-mode-pod
  updateStrategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app.kubernetes.io/name: test-access-mode-p...

[grim harness]

cjreyn

[NetApp/trident] Issue opened: #853 No limits or requests set on Trident resources

Describe the bug
No limits or requests are set for any Trident pods. This is bad practice, as an issue in Trident could take down the cluster.

Environment
Provide accurate information about the environment to help us reproduce the issue.

• Trident version: 23.07
• Trident installation flags used: none
• Container runtime: containerd 1.6.6-3.1
• Kubernetes version: 1.25.9
• Kubernetes orchestrator: kubeadm
• Kubernetes enabled feature gates: na
• OS: RHEL8
• NetApp b...

[grim harness]

netapp-ci

[trident:master] 3 new commits

9a541c4 Added the ability to pause provisioning of volu... - shashank-netapp
f349692 Modify snapshot dir access for managed volume i... - VinayKumarHavanur
5efa994 Fix for GitHub issue #828 (#1438) - ntap-rippy

[grim harness]

viju2008

[NetApp/trident] Issue opened: #854 Install open-iscsi on all tanzu worker nodes for Vmware tanzu TKG

Describe the solution you'd like

Documentation on how to Install open-iscsi on all tanzu worker nodes for Vmware tanzu TKG /TKGM

Describe alternatives you've considered

Additional context

Tanzu tkg worker nodes are provisioned and scaled automatically so manually install tridents dependent packages like open-iscsi is not possible on worker nodes

Please help

[grim harness]

huggingface

[NetApp/trident] Fork created: huggingface/trident

[grim harness]

seb0s

[NetApp/trident] Fork created: seb0s/trident

[grim harness]

netapp-ci

[trident:master] 3 new commits

4f49bd2 Change multiple daemonset deletion from foregro... - agagan
c3e4edb The ONTAP REST unit test changes for ISCSI, Igr... - agagan
7dca053 Modify operator and tridentctl to install with ... - torirevilla

[grim harness]

netapp-ci

[trident:stable/v23.07] 1 new commit

4968583 Changed the multiple daemonset deletion from fo... - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

cefc2f4 Dynamic SnapDir Update via tridentctl - aparna0508

[grim harness]

netapp-ci

[trident:master] 1 new commit

c6f3fcb Forced detach support for NVMe. - sphadnis007

[grim harness]

netapp-ci

[trident:stable/v23.07] 1 new commit

5db6af5 23.07.1 changelog - agagan

[grim harness]

XciD

[NetApp/trident] Fork created: XciD/trident

[grim harness]

netapp-ci

[trident:master] 2 new commits

0e43b8e SVM and NVMe ONTAP rest unit test change - agagan
312d2cc ONTAP abstraction REST unit test changes for NV... - agagan

[grim harness]

netapp-ci

[trident:stable/v23.07] 2 new commits

27f739f changed trident version to 23.07.1 - agagan
07a33a1 Notice file for v23.07.1 - agagan

[grim harness]

netapp-ci

[NetApp/trident] New release published: v23.07.1

bassplay3r

[NetApp/trident] New tag created: v23.07.1

[grim harness]

uppuluri123

[NetApp/trident] Issue closed: #740 Support zero-downtime upgrading for the Trident node plugins

[grim harness]

netapp-ci

[trident:master] 1 new commit

f58e4b8 Accommodate Snapshot Reserve In Volume Size Dur... - aparna0508

[grim harness]

netapp-ci

[trident:master] 3 new commits

32c6e79 Add ACP flag to ASUP in Trident deployment - jwebster7
9241e60 Adding snapshot reserve to resize computations ... - ntap-rippy
b643c35 upgrading golang to v1.21 - shashank-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

6e98a01 Allows default ACP and ASUP images to be config... - reederc42

[grim harness]

sdodson

[NetApp/trident] Issue opened: #855 Support iscsid.socket activation

Describe the solution you'd like
In RHCOS iscsi is started via systemd socket activation. Calls to iscsiadm or other clients will automatically start required iscsi services. Could this socket activation be leveraged by the CSI driver, or alternatively, simply start the iscsid service on startup given that the driver runs as a privileged pod anyway.

Describe alternatives you've considered
OpenShift MachineConfig is the documented solution, but that causes unnecessary rollout, t...

[grim harness]

netapp-ci

[trident:master] 2 new commits

35298b6 If passed an empty volume name, VolumeExists sh... - ntap-rippy
b62610a Add trident-acp api client - jwebster7

[grim harness]

netapp-ci

[trident:master] 1 new commit

4d4c4cf TRID 13997 Disable update volume option (#1461) - aparna0508

[grim harness]

netapp-ci

[trident] Branch master was force-pushed to `bfcca96`

Compare changes

[grim harness]

netapp-ci

[trident:master] 1 new commit

2c79ac1 Capture trident-acp logs using tridentctl - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 1 new commit

0e07b7c Handled dash to underscore conversion for Qtree... - sphadnis007

[grim harness]

netapp-ci

[trident:master] 2 new commits

4a8902f Adds install option to allow Autosupport to ski... - reederc42
6f03667 Changes for Kerberos support in ANF - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 2 new commits

d9d9948 Redact the chap secrets in REST workflow - mravi-na
4c8feca Fix tracking file validation on windows worker... - mravi-na

[grim harness]

jaskiratsingh98

[NetApp/trident] Fork created: jaskiratsingh98/trident

jaskiratsingh98

[NetApp/trident] Pull request opened: #856 Use dmsetup remove to ensure multipath device

Use dmsetup remove to ensure multipath device mapping is flushed in case multipath -f fails.

[grim harness]

netapp-ci

[trident:master] 5 new commits

4c7b71a Changes to remove support for volume import at ... - prajwalv-netapp
78e45e2 Updates production, standalone ACP sidecar image - reederc42
20eec2f Add ACP entitlement checks - jwebster7
ebe0be5 Updated 3rd-party dependencies for 23.10.0 release - aparna0508
7fea629 ACP Version - torirevilla

[grim harness]

netapp-ci

[trident:master] 1 new commit

dcf81b0 Added support for Azure Managed Identity (AMI). - prajwalv-netapp

[grim harness]

netapp-ci

[NetApp/trident] New branch created: stable/v23.10

netapp-ci

[trident:stable/v23.10] 1 new commit

660ddeb stable/v23.10 - bassplay3r

[grim harness]

dmpo1

[NetApp/trident] Issue opened: #857 Slow Trident CSI controller. It takes 2 minutes to e

Hi guys, I have rather old version of Trident 21.10.0 and kubernetes 1.23.10, but it was working well up until yesterday when it stopped :)

We have a k8s cluster with Trident and OnTap NetApp used as NFS storage.
The problem is that after restart of daemonset trident-csi pods , it takes minutes or hours for them to fully start.
The pods can't register nodes in the controller (which I've tried to restart as well).

time="2023-10-11T10:01:24Z" level=debug msg="\n>>>>>>>>>>>>>>>>>...

[grim harness]

netapp-ci

[trident:master] 3 new commits

f68beb8 Changes to fix the import issue - prajwalv-netapp
3da6849 Fix ACP version output for standard Trident ins... - torirevilla
c5bcf4a Fix for snapshot restore. - prajwalv-netapp

[grim harness]

netapp-ci

[trident:stable/v23.10] 2 new commits

645b29d Fix ACP version output for standard Trident ins... - torirevilla
1e36762 Added support for Azure Managed Identity and bu... - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

b2278ac make initial acp version check async - jwebster7

[grim harness]

radhika-pr

[NetApp/trident] Issue opened: #858 Feature Request: customize the trident orchestrator configuration options while using helm chart

In helm include options for configuring hostNetwork and https_port for trident-controller.

Trident helm chart now allows only limited options for customizing the configuration options of trident orchestrator. It would be nice to have the options to run the trident-controller deployment on host network when required and options to change the http port too.

An alternate solution we have tried is using tridentctl generate the manifests and use it for additional configuration changes. ...

[grim harness]

netapp-ci

[trident:stable/v23.10] 1 new commit

33fd0cf make initial acp version check async - jwebster7

[grim harness]

netapp-ci

[trident:stable/v23.10] 1 new commit

1d0facc Cleans up dependencies (#1491) - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

7620dc2 Cleans up dependencies - prajwalv-netapp

[grim harness]

netapp-ci

[trident:master] 1 new commit

1205721 Flexgroup destroy REST fix - torirevilla

[grim harness]

ffilippopoulos

[NetApp/trident] Issue opened: #859 Allow users to specify the maximum number of volumes per node

Describe the solution you'd like
Allow users to specify the maximum number of volumes per node.

Describe alternatives you've considered
Spread constraints is the only other solution to manipulate scheduling of volumes, but works based on topology features, like zones, and cannot guarantee the maximum number of volumes per node.

Additional context
This will be in line with Kubernetes CSI docs: https://kubernetes-csi.github.io/docs/volume-limits.html and will be following b...

[grim harness]

netapp-ci

[trident:master] 3 new commits

58a45e4 Bump trident version to 24.01 - jwebster7
8e725a9 Fixed unit test to tolerate real PV mappings - clintonk
c681cfc Fix operator upgrade - torirevilla

[grim harness]

netapp-ci

[trident:stable/v23.10] 2 new commits

d343e9d Flexgroup destroy REST fix - torirevilla
6d2477d Fix operator upgrade - torirevilla

[grim harness]

ADustyOldMuffin

[NetApp/trident] Fork created: ADustyOldMuffin/trident

[grim harness]

moonek

[NetApp/trident] Issue opened: #860 Large-scale PV creation and mount take a long time.

It took more than 10 minutes to create 200 PVs at once and pod mount them.
First of all, it took over 8 minutes to create 200 PVs.
And it took about 2 minutes for the pod to mount. (STATUS: ContainerCreating)

First, I would like to know how to shorten the large-scale PV creation time.
And I'm curious that Pod mount starts after all PVs are created.
(I expected that pods for which PV creation was completed would be mounted sequentially.)

I wonder if options for tuning are provided or...

[grim harness]

netapp-ci

[trident:master] 1 new commit

0b98733 Ensuring lower case for snapshotDir attribute o... - aparna0508

[grim harness]

owaiz47

[NetApp/trident] Fork created: owaiz47/trident

[grim harness]

lindhe

[NetApp/trident] Issue opened: #861 Document TridentBackendConfig custom resource

Describe the solution you'd like

The TridentBackendConfig custom resource is undocumented when inspecting it with kubectl explain:

$ kubectl explain TridentBackendConfig
KIND:     TridentBackendConfig
VERSION:  trident.netapp.io/v1

DESCRIPTION:
     

Having documentation for the object and each field in the object is immensely helpful when working with the system. This will also contribute to the API being self-documenting, reducing the burden of keeping ...

[grim harness]

netapp-ci

[trident:master] 1 new commit

aef86de Added FSx personality to ontap-nas driver - clintonk

[grim harness]

netapp-ci

[trident:master] 1 new commit

e902bbd 23.10 Changelog - agagan

[grim harness]

netapp-ci

[trident:stable/v23.10] 2 new commits

a79fab7 Notice file 23.10 - agagan
4ef279a Bump ASUP version to 23.10 stable branch - torirevilla

[grim harness]

netapp-ci

[trident:stable/v23.10] 1 new commit

212891d 23.10 Changelog - agagan

[grim harness]

netapp-ci

[trident:master] 2 new commits

099087f bump ASUP version to 23.10 - jwebster7
a877788 Add 23.10 Notice files to master - torirevilla

[grim harness]

mmerrill3

[NetApp/trident] Issue opened: #862 Capability SYS_ADMIN is published as removed in changelog, but is still in factory method

Describe the bug
Capability SYS_ADMIN is published as removed in changelog, but is still in factory method. If the privilege is not necessary, remove this from the factory methods that create the daemonsets.

Environment
Daemonsets are using the SYS_ADMIN capability, but according the CHANGELOG, this was removed.

• Trident version: v23.07.1

To Reproduce
Daemonsets are produced today with pods that require SYS_ADMIN privileges, which is too broad.

**Expected be...

[grim harness]

tmsdce

[NetApp/trident] Issue opened: #863 No 23.10.0 tag or release

Describe the bug
Not really a bug per se.
A new chart version v23.10.0 seems to have been published 4 days ago. The docker image 23.10.0 is also available. But there is no associated git tag nor release for 23.10.0 on the github repo. Is it expected (maybe the release process has changed since 23.07.1) ? It is quite confusing and I'd like to be sure that this is actually a working release before upgrading

Environment
Any environment

To Reproduce
No git tag (or release)
...

[grim harness]

netapp-ci

[trident:master] 1 new commit

2522969 Unit test for ONTAP abstraction REST - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

a9a82bf ONTAP REST NAS volume unit test changes - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

9f87e41 ONTAP REST Qtree unit test - agagan

[grim harness]

netapp-ci

[NetApp/trident] New release published: v23.10.0

bassplay3r

[NetApp/trident] New tag created: v23.10.0

[grim harness]

tmsdce

[NetApp/trident] Issue closed: #863 No 23.10.0 tag or release

[grim harness]

ysakashita

[NetApp/trident] Issue opened: #864 Option to disable iSCSI session SelHealing feature

Describe the solution you'd like

I would like to be provided with an option to disable the feature of "automation to detect and fix broken or stale iSCSI sessions on host nodes" in Tridnet v23.01.
The feature may cause iSCSI sessions to be logged out at the incorrect time, risking a serious incident.
For example, if an iSCSI session is logged out by this function at the perfect timing when a path is switched in Multi Path, the number of alive paths will be zero, leading to a serious ...

[grim harness]

netapp-ci

[trident:master] 1 new commit

06ac133 added deprecation notice for k8s 1.23 new minimum - agagan

[grim harness]

netapp-ci

[trident:master] 1 new commit

6506551 Added FSx personality to ontap-nas-flexgroup, o... - galrabiniovich

[grim harness]

assetsense

[NetApp/trident] Fork created: assetsense/trident

[grim harness]

Numblesix

[NetApp/trident] Issue opened: #865 Wrong Permission on nfs pvc

Describe the bug
Hello we noticed that recently the owner in the pvc seems wrong to us as its root and we would have expected it to be also the random uid.

Environment
Dev

• Trident version: 23.10
• Trident installation flags used: none
• Container runtime: [e.g. Docker 19.03.1-CE]
• Kubernetes version: v1.26.9+636f2be
• Kubernetes orchestrator: OpenShift 4.13.19
• Kubernetes enabled feature gates: none
• OS: based on CoreOS 4.13 -> RHEL 9.2
• NetApp backend types: On...

[grim harness]

RuairiSinkler

[NetApp/trident] Issue opened: #866 Prevent/Suppress "ACP is not enabled." and "Trident-ACP version is empty." messages

Describe the solution you'd like
Since upgrading from 23.01.0 to 23.10.0 I am repeatedly seeing the "ACP is not enabled." and "Trident-ACP version is empty." messages in our Trident Controller trident-main logs.

I am using Trident on its own, without any of the other Astra services, and would like these log lines to not appear.

There should be a way of specifying this feature is not needed to prevent the noisy log line, and/or the documentation updated to describe how.

**D...

[grim harness]

netapp-ci

[trident:master] 1 new commit

e32b0f4 Use helm to install ACP - torirevilla

[grim harness]

lukasertl

[NetApp/trident] Issue opened: #867 Keep operatorhub.io current

Right now you can install version 22.10 through operatorhub.io; this version is more than a year old.

Could you please keep the version on operatorhub.io more current?

Thank you.

[grim harness]

RuairiSinkler

[NetApp/trident] Issue opened: #868 Astra Trident "failed to create cloned volume" - but creates it in Amazon FSx

Describe the bug
This issue is intermittent, though happens more-often-than-not.

When trying to provision an AmazonFSx Flexgroup volume as a clone from a snapshot, Trident is reporting failure (and eternally failing) despite successfully creating the volume in AmazonFSx.

See (anonymised and shortened) Trident-main logs here:

{"@timestamp":"2023-11-15T08:54:47Z","crdControllerEvent":"add","driver":"ontap-nas-flexgroup","error":"API status: failed, Reason: Insufficient pr...

[grim harness]

netapp-ci

[trident:master] 1 new commit

80ffc02 Fix for SMB volume import - prajwalv-netapp

[grim harness]

sithglan

[NetApp/trident] Issue opened: #869 Trident can not delete, create or map nvme/tcp namespaces to subsystems while in failover on a metrocluster ip

Describe the bug
Trident v23.10.0 can not delete, create, map nvme/tcp namespaces to subsystems while in failover on a metrocluster ip.

Environment
Upstream Kubernetes v1.28.3, trident v23.10.0, metrocluster ip aff a220 9.13.1P2

• Trident version: v23.10.0
• Trident installation flags used:

curl -sL https://github.com/NetApp/trident/releases/download/v23.10.0/trident-installer-23.10.0.tar.gz | tar -xzf -
cd trident-installer
sudo cp tridentctl /usr/local/bin
kubectl app...

[grim harness]

sithglan

[NetApp/trident] Issue closed: #869 Trident can not delete, create or map nvme/tcp namespaces to subsystems while in failover on a metrocluster ip

[grim harness]

KostianMel

[NetApp/trident] Fork created: KostianMel/trident

[grim harness]

rabin-io

[NetApp/trident] Issue opened: #870 FATA Install pre-checks failed; could not initialize Kubernetes client; unable to load in-cluster configuration, KUBERNETES_SERVICE_HOST and KUBERN...

Describe the bug

Seem to be same as reported in https://github.com/NetApp/trident/issues/627
In my case, I'm experiencing this same issue, when running

./tridentctl install -n trident --kubeconfig /cluster/auth/kubeconfig --debug

DEBU Initialized logging.                          logLevel=debug
DEBU Trident image: netapp/trident:23.10.0        
DEBU Autosupport image: docker.io/netapp/trident-autosupport:23.10 
DEBU Creating in-cluster Kubernetes clients.       request...

[grim harness]

dje4om

[NetApp/trident] Issue opened: #871 snapshotPolicy in backend config for azure-netapps-files driver

Describe the solution you'd like
Dynamically define a snapshot policy on volumes provisioned by a storageClass on a properly configured backend to do so on Azure with azure-netapp-driver.

In the same way we can do this with ontap-nas driver on backend config according to this documentation :

  ...
  storageDriverName: "ontap-nas"
  backendNam...

[grim harness]

omerbd21

[NetApp/trident] Issue opened: #872 MinimumVolumeSizeBytes not protected with validating webhook

Describe the solution you'd like
As of now, when a user asks for a volume smaller than 20Mib, the request gets processed and hangs (because the volume wouldn't be created and that hangs the queue). We would like for a validating webhook to be created, making sure the user can't create a volume smaller than the MinimumVolumeSizeBytes const.

Describe alternatives you've considered
We currently implemented a solution based on limitRange, which we have to setup in any Trident environ...

[grim harness]

isabella232

[NetApp/trident] Fork created: isabella232/trident

[grim harness]

uppuluri123

[NetApp/trident] Issue closed: #763 Support snapshots on ontap-nas-economy driver

uppuluri123

[NetApp/trident] Issue closed: #742 TridentVolume resource lingering when PVC force-deleted.

[grim harness]

Pravinkumar-netapp

[NetApp/trident] Issue opened: #873 Dynamic way of scheduling trident pod(s) for multiple tainted nodes.

Dynamic way of scheduling trident pod(s) for multiple tainted nodes.
We would like to have trident version that will respect taint effect and operator rather taint key,operator.

• How big is your cluster?
Ans: trident has been installed on multiple cluster (6+) and total no of node(s) are 650+
• Issue with current version?
Ans: Yes. Trident v23 (23.0.1)
• Give us brief explanation the logic ?
Ans: In our environment, Taint of node may vary over time. So we would like to have tride...

[grim harness]

andreasvandaalen

[NetApp/trident] Issue opened: #874 Issue creating a volume and mounting to a pod in GKE with Trident

Describe the bug
Following a fresh Trident installation and backend creation according to the NetApp Trident Backend Configuration, we had an issue with volume creation and mounting on the NetApp backend (CVO).

Despite the backend's successful creation, the expected volume still needs to be created on the backend. Instead, a "magic" volume appears mounted in the pod as the PVC, which is of "tmpfs" type rather than the anticipated shared volume from the NetApp backend.

The Tride...

[grim harness]

goog-drewk

[NetApp/trident] Fork created: goog-drewk/trident

[grim harness]

goog-drewk

[NetApp/trident] Pull request opened: #875 Support Direct Data Protection Volume Provisioning

Adds Data Protection volume provisioning without needing a TridentMirrorRelationship

[grim harness]

sontivr

[NetApp/trident] Issue opened: #876 TridentBackendConfig doesn't get deleted

Describe the bug
A clear and concise description of what the bug is.

Hello,

I am trying to test FSxONTAP filesystem with iSCSI protocol for persistent volumes to deploy Victoria Metrics time series database into EKS cluster.
I am following Run containerized applications efficiently using Amazon FSx for NetApp ONTAP and Amazon EKS with some suppo...

[grim harness]

netapp-ci

[trident:master] 1 new commit

e2ac278 Removes attestations from manifests and convert... - reederc42

[grim harness]

netapp-ci

[trident:stable/v23.10] 1 new commit

afedd4e Removes attestations from manifests and convert... - reederc42

[grim harness]

mgrzybek

[NetApp/trident] Issue opened: #877 Add SM-BC support to Trident

Describe the solution you'd like

Trident should support the replication mechanism provided by SM-BC when using iSCSI protocols:

• managing two SVM
• managing the extended multipath provided by the "passive" SVM

Describe alternatives you've considered

We tried ONTAP Metro Cluster but the failover mechanism looks old fashion compared to SM-BC. This is a simple IP-based failover mode that does not use the multipath features of iSCSI.
Moreover, SM-BC has a fine-grained scope t...

[grim harness]

netapp-ci

[trident:master] 1 new commit

c921c8b Trident should check for ACP only if it is enabled - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 1 new commit

d7aa500 Trident liveness probe should check for ACP onl... - ntap-arorar

[grim harness]

netapp-ci

[trident:master] 1 new commit

9e2a6ff Recognize finalizing status on backend mirror r... - torirevilla

[grim harness]

netapp-ci

[trident:master] 1 new commit

e86b88a Dynamically update SnapshotDir for ANF volume - aparna0508

[grim harness]

rabin-io

[NetApp/trident] Issue opened: #878 Trident fail to delete child FlexClone of a FlexClone

Describe the bug
When using trident as backend for virtual machines with kubevirt, if one restore a volume of a VM and later on delete the VM, we are left with FlexClone without it parent, which require manual intervention with cli to resolve it

Environment

• Trident version: 23.10.0
• Trident installation flags used: -d -n trident
• Container runtime: cri-o/runC
• Kubernetes version: v1.27.6
• Kubernetes orchestrator: OpenShift 4.14
• Kubernetes enabled feature gates:
  ...

[grim harness]

nemobis

[NetApp/trident] Issue opened: #879 Differences from POSIX

Describe the solution you'd like
I can't find any mention of POSIX compliance in the Trident documentation or connected docs.

It would be nice to have a page in the documentation describing how to maximise POSIX compliance (for example, does it help to enable NFSv4 in Ontap?) and what are the remaining differences from the POSIX standard.

Describe alternatives you've considered
I've considered usi...

[grim harness]

LarsWinters

[NetApp/trident] Issue opened: #880 Trident Operator Helm Chart - unable to get Trident Image version information

Describe the bug
We have an airgapped environment and want to install the trident operator via the helm chart. We have some policies so we added Resource Quotas and some labels/annotations. However, we have problems with the CRD of the Helm chart.
We pushed the 3 images of the helm chart to our private registry. I already double checked the correct images/versions/tags.
We get this error message:

`Failed to install Trident; err: unable to get Trident image version information, pl...

[frozen blaze]

Are any of you actually using these alerts?

If so, please @ me here!

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

rahulguptajss

[NetApp/harvest] New release published: nightly

[grim harness]

carchi8py

[ansible-collections/netapp.ontap] New release published: 22.10.0

[grim harness]

netapp-ci

[NetApp/trident] New release published: v24.02.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-gcp] New release published: v24.4.0

[grim harness]

suhasbshekar

[ansible-collections/netapp.ontap] New release published: 22.11.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v1.1.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v1.1.1

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v1.1.2

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-gcp] New release published: v24.6.0

[grim harness]

netapp-ci

[NetApp/trident] New release published: v24.06.0

[grim harness]

netapp-ci

[NetApp/trident] New release published: v24.06.1

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v1.1.3

[grim harness]

carchi8py

[ansible-collections/netapp.ontap] New release published: 22.12.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v1.1.4

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v24.10.0

[grim harness]

carchi8py

[ansible-collections/netapp.ontap] New release published: 22.13.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v2.0.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v2.0.1

[grim harness]

suhasbshekar

[ansible-collections/netapp.ontap] New release published: 22.14.0

[grim harness]

suhasbshekar

[NetApp/terraform-provider-netapp-ontap] New release published: v2.1.0

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v24.10.1

[grim harness]

suhasbshekar

[NetApp/terraform-provider-netapp-ontap] New release published: v2.1.1

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.02.0

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.02.1

[grim harness]

suhasbshekar

[NetApp/terraform-provider-netapp-ontap] New release published: v2.2.0

[grim harness]

suhasbshekar

[ansible-collections/netapp.ontap] New release published: 23.0.0

[grim harness]

suhasbshekar

[ansible-collections/netapp.ontap] New release published: 23.0.0

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.06.0

[grim harness]

suhasbshekar

[NetApp/terraform-provider-netapp-ontap] New release published: v2.3.0

[grim harness]

suhasbshekar

[ansible-collections/netapp.ontap] New release published: 23.1.0

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.06.1

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.06.2

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.10.0

[grim harness]

wenjun666

[ansible-collections/netapp.ontap] New release published: 23.2.0

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v25.06.3

[grim harness]

suhasbshekar

[NetApp/terraform-provider-netapp-ontap] New release published: v2.4.0

[grim harness]

suhasbshekar

[ansible-collections/netapp.ontap] New release published: 23.3.0

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v26.02.0

[grim harness]

wenjun666

[ansible-collections/netapp.ontap] New release published: 24.4.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v2.5.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v2.6.0

[grim harness]

wenjun666

[NetApp/terraform-provider-netapp-ontap] New release published: v2.6.1

[grim harness]

netapp-ci-release[bot]

[NetApp/trident] New release published: v26.02.1

[fickle star]

is this the right place to ask about the Trident drivers for k8s?

[graceful geyser]

Yea! What’s up? 21.10 was just released as well!

https://github.com/NetApp/trident/releases

[spare parrot]

Note the documentation for Astra Trident has a new home at NetApp Docs: https://docs.netapp.com/us-en/trident/index.html.

[elder wraith]

Check this out, I have updated my github with a new scenario (number 19):
agenda: protocols, access modes & securitycontext
https://github.com/YvosOnTheHub/LabNetApp

[elder wraith]

Happy birthday Trident 🔱

🎉🎉🎉🎉🎉

5 years already !

[elder wraith]

Hi all,
2 new chapters here:

• Scenario00: Some Best Practices & Advices
• Scenario20: Generic Ephemeral Volumes

https://github.com/YvosOnTheHub/LabNetApp

[graceful geyser]

Trident v22.01 Released
https://github.com/NetApp/trident/releases

IMPORTANT: If you are upgrading from any previous Trident release and use Azure NetApp Files, the location config parameter is now a mandatory, singleton field.

**Fixes**

- Fixed issue where azure-netapp-files driver could be confused by multiple resources with the same name.
- ONTAP SAN IPv6 Data LIFs now work if specified with brackets.
- Kubernetes: Increase node registration backoff retry time for large clusters.
- Fixed issue where attempting to import an already imported volume returns EOF leaving PVC in pending state (Issue #489).
- Fixed issue when Astra Trident performance slows down when > 32 snapshots are created on a SolidFire volume.
- Replaced SHA-1 with SHA-256 in SSL certificate creation.
- Fixed ANF driver to allow duplicate resource names and limit operations to a single location.

**Enhancements**

- Added ability to limit azure-netapp-files driver to specific resource groups, NetApp accounts, capacity pools.
- Kubernetes: Added support for Kubernetes 1.23.
- Allow cross-region volumes in GCP driver (Issue #633)
- Kubernetes: Add scheduling options for Trident pods when installed via Trident Operator or Helm (Issue #651)
- Added support for 'unixPermissions' option to ANF volumes. (Issue #666)

**Deprecations**

- Trident REST interface can listen and serve only at 127.0.0.1 or [::1] addresses

[elder wraith]

🔱

[exotic lintel]

One of our customers want to start using trident as the PoC went very well. When it comes to backup with SM: is there a way for newly created volumes via trident to be somehow recognised on the SM destination so the new volumes are backed up as well? We need to create new SM destination volumes and a relationship and initialise it.
How do you solve this today?

[regal kraken]

The recommended method for SnapMirror/DR with Trident is to use SVM-DR

If there are more requirements than just volume replication and you are using Kubernetes/OpenShift then look at Astra Control Center.

[exotic lintel]

Ok thanks a lot. Will have a look at Astra Control Center as we‘d like to have a backup replication and not a DR. And it needs to be easy use for the admins not familiar with NetApp

[regal kraken]

If you’d like any help or more information just let me know and either I’ll sort it for you or I’ll get you to someone in your geo, we have a free trial sign up for ACC or I can arrange a demo and some use case discussions.

[grim harness]

seijitanabe

[NetApp/trident] New comment on issue #723: Request: Periodic discard/trim \(SCSI unmap\) vs\. online discard

My Customer is also facing this issue.
When enabling discard option in the StorageClass, I/O stoppages occur frequently on the volumes that are frequently written and deleted 60KB files. (When disabling this option, it does not happen at all.

It should be mentioned in the Trident documentation that OS vendors don't recommend it and that discard option may not always be appropriate.

[grim harness]

wonderland

[NetApp/trident] Fork created: wonderland/trident-1

[grim harness]

demonoid666

[NetApp/trident] New comment on issue #695: Document setting securityContext\.fsGroup="nfs" in ontap\-nas

Please advise which trident version will fix issue #695. I am not able to found in release note. Thanks

[grim harness]

juliantap

[NetApp/trident] New comment on issue #695: Document setting securityContext\.fsGroup="nfs" in ontap\-nas

Hi @demonoid666 this was a documentation hotfix (rather than a release develooment change). It was made in 22.01. Documentation hot fixes are not included in the development release notes.

Let me know if you have any additional questions. Thanks!

[grim harness]

tksm

[NetApp/trident] Issue opened: #740 Support zero\-downtime upgrading for the Trident node plugins

Describe the solution you'd like

We would like the trident operator to upgrade the Trident node plugins without downtime.

The trident operator deletes the Trident DaemonSet once when updating the trident version. It causes downtime for mounting and unmounting until new DamonSet pods become ready.

It becomes a serious issue when one of the plugin pods cannot be d...

[grim harness]

domruf

[NetApp/trident] Issue opened: #741 setting nfsMountOptions: 'vers=4' results in error \(exit status 32\)

Describe the bug
When I set nfsMountOptions: 'vers=4' I get this errors like this

MountVolume.SetUp failed for volume "pvc-5fac2bac-b21f-4d7d-ab7a-d5a56381ac77" : rpc error: code = Internal desc = error mounting NFS volume :/my:storagePrefix_pvc_5fac2bac_b21f_4d7d_ab7a_d5a56381ac77 on mountpoint /var/lib/kubelet/pods/0cef26a5-8966-472e-b7c1-7cd4d568ff66/volumes/kubernetes.io~csi/pvc-5fac2bac-b21f-4d7d-ab7a-d5a56381ac77/mount: exit status 32

With no nfsMountOptions or with `...

[grim harness]

wonderland

[NetApp/trident] New comment on issue #741: setting nfsMountOptions: 'vers=4' results in error \(exit status 32\)

Unfortunately error code 32 is pretty generic in NFS. It is often related to networking issues (firewall, ...). NFSv4 uses different ports than NFSv3. In addition, can you check that NFSv4 is active on the Ontap system (at the SVM level)?

[grim harness]

uberspot

[NetApp/trident] Issue opened: #742 TridentVolume resource lingering when PVC force\-deleted\.

Describe the bug
We have observed a large number of orphan tridentVolume resources in our k8s cluster, stuck in state==deleting.
And that seems to persist for ever (there's some there from the past 2 years). And we also observe in the trident csi daemonset logs that for a lot of these it could not find the equivalent PVC. We cross-checked all of the tridentvolumes and we found no corresponding pvcs for them in the cluster.
Potentially the pvc could have been force deleted (by removin...

[grim harness]

amehub

[NetApp/trident] Issue opened: #743 Renamed data aggregate breaks trident backend

Describe the solution you'd like
After rename of data aggregate dynamically update the Trident backend. Do not statically define the data aggregate in the backend spec.

Describe alternatives you've considered
None

Additional context
We manage trident backends using tridentbackendconfig. We noticed that the data aggregate appears to be statically defined in the trident backend when the trident backend is created. After the data aggregate was renamed we are unable to cr...

[grim harness]

tksm

[NetApp/trident] New comment on issue #740: Support zero\-downtime upgrading for the Trident node plugins

It becomes a serious issue when one of the plugin pods cannot be deleted for some reason. The trident operator does not create a new DaemonSet until all plugin pods have been deleted since it deletes the DaemonSet with the foreground option.

For your reference, here is the reproducing step for this issue.

1. Deploy the trident operator v22.01.1 with the TridentOrchestrator object.
2. Wait until all trident pods become ready.
3. Set a dummy finalizer to any one Trident pod.
   • e....

[grim harness]

scaleoutsean

[NetApp/trident] New comment on issue #732: Support NetAPP trident on ARM architecture

mountpoint /var/lib/kubelet/pods/ea842b1b-3534-43e5-8a83-efcef63d41b0/volumes/kubernetes.io~csi/pvc-/mount: fork/exec /netapp/mount: exec format error

You're clearly using an x86 executable.

As mentioned here you need to replace all x86_64 base with arm64 base images.

[grim harness]

domruf

[NetApp/trident] New comment on issue #741: setting nfsMountOptions: 'vers=4' results in error \(exit status 32\)

Yes I agree, this is very little information.
I'd expect the mount command to put out more information to stderr, but I was not able to find any more information yet.
Is there a way to get stderr information?

[grim harness]

liuningty

[NetApp/trident] Issue opened: #744 can't deploy trident csi daemon set pods on GKE worker nodes

Describe the bug

when deploying Trident on Google GKE environment, use both Helm and manual process to deploy trident with no custom flags.
Trident operator and csi controller can be provisioned successfully, but csi daemon set pods are not being spun up on any GKE worker node that needs to mount a volume.
I am able to create persistent volumes, but not able to mount them into the pods.
when check pod description, it shows the below error:
CSINode does not contain driver csi...

[grim harness]

jwebster7

[NetApp/trident] New comment on issue #744: can't deploy trident csi daemon set pods on GKE worker nodes

Hi @liuningty, thank you for reporting this. This is a known issue and a fix for this will be included in our 22.07 release.

Until 22.07 is released, one workaround is to manually create a Resource Quota in the same namespace Trident is installed in. This should allow Trident DaemonSet to consume the system-node-critical Priority Class.

Here's an example Resource Quota for you to use:

apiVersion: v1
kind: ResourceQuota
metadata:
  name: trident-csi
  namespace: trident # ...

[grim harness]

liuningty

[NetApp/trident] New comment on issue #744: can't deploy trident csi daemon set pods on GKE worker nodes

Thanks @jwebster7, after I installed Resource Quota you provided, the trident CSI is working okay now. thanks for your quick response.

[grim harness]

tksm

[NetApp/trident] Issue opened: #745 Support zero\-downtime upgrading for the Trident controller plugin

Describe the solution you'd like
We would like the trident operator to upgrade the Trident controller plugin without downtime.

Similar to https://github.com/NetApp/trident/issues/740, the trident operator deletes the deployment for the Trident controller plugin once when updating the trident version. It causes all the Trident functionality to be unavailable until the new controller pod becomes ready.

Furthermore, the deployment for the trident controller plugin has only one replica...

[grim harness]

jwebster7

[NetApp/trident] New comment on issue #744: can't deploy trident csi daemon set pods on GKE worker nodes

Happy to help @liuningty! Please continue to let us know if you find anything else or have any questions at all.

[grim harness]

gnarl

[NetApp/trident] New comment on issue #744: can't deploy trident csi daemon set pods on GKE worker nodes

This issue is fixed with commit d9715f8 and will be included in the Trident 22.07 release.

[grim harness]

cbf123

[NetApp/trident] Issue opened: #746 documentation has not been updated for 22\.01

Just noticed that trident/docs/support/requirements.rst is still talking about trident 21.07 as the latest version, which is quite a bit out of date now.

[frozen blaze]

A note here... As of this morning, GitHub notifications for new comments have been disabled. We should only be notified about new releases and new issues over here now.

[grim harness]

netapp-ci

[trident:master] 3 new commits

35db902 VR Check Replication Schedule if backend has as... - torirevilla
60c390c Added support for ANF network features to azure... - clintonk
1a27490 Add new linters govet, gosec and errcheck (#985) - inianv

[frozen blaze]

And commits 🙂

[grim harness]

netapp-ci

[trident:master] 1 new commit

4b6c3c6 Updated Trident's 3rd-party dependencies for 22... - clintonk

[grim harness]

netapp-ci

[trident:master] 1 new commit

69293f8 Storage attribute 80% unit test coverage - simrins

[grim harness]

djjudas21

[NetApp/trident] Issue opened: #747 Add support for setting priorityClassName

Describe the solution you'd like
Add support for setting priorityClassName on all Pods deployed using the Helm chart.

We use pod priority classes and the Trident pods should have a higher priority than workload pods so they start up first.

I can put in a PR for this change if it would help. Thanks.

[grim harness]

justinmclean

[NetApp/trident] Issue opened: #748 LICENSE and NOTICE issues

Hi, I'm not involved in this project but I'm involved in the ASF and have reviewed 100's of releases there. I took a look at your LICENSE and NOTICE and noticed a number of things.

• LICENSE is for license information not NOTICE. The NOTICE file has a large amount of license information.
• The LICENSE and NOTICE should reflect the contents of the release, not its dependencies. NOTICE seems to list licenses of dependancies. This means that the binary and source releases may have different LI...

[grim harness]

netapp-ci

[trident:master] 3 new commits

ee934c9 Fix regression in NodeStageISCSIVolume, return ... - mravi-na
992d9e1 Constrain allowed volume plugins with PSP and SCC - ameade
4b58bcb Allow trident to upgrade and still recognize re... - arnavs7

netapp-ci

[NetApp/trident] Issue closed: #606 Set specific volumes in psp

[grim harness]

netapp-ci

[trident:master] 1 new commit

de27a8d MetroCluster switchover detection for ONTAP dri... - clintonk

netapp-ci

[NetApp/trident] Issue closed: #228 Support for metrocluster

[grim harness]

juliantap

[NetApp/trident] Pull request opened: #749 Update CONTRIBUTING\.md

Updated the CCLA process per Tim. We also need to remove the CCLA PDF.

Change description

Need to update the CCLA process per Tim.

Project tracking

n/a

Do any added TODOs have an issue in the backlog?

no

Did you add unit tests? Why not?

n/a

Does this code need functional testing?

no

Is a code review walkthrough needed? why or why not?

no

Should additional test coverage be executed in addition to pre-merge?

no

Does this code nee...

[grim harness]

netapp-ci

[trident:master] 2 new commits

925341c rename notSafeToDetach to Attach - benpresnell
dbbeb7b Updated AstraDS driver to v1beta1 CRDs - clintonk

[grim harness]

netapp-ci

[trident:master] 1 new commit

8c5b936 Removes SYS_ADMIN capability and disallows secc... - reederc42