I think about using Trident with Qtrees (ontap-nas-economy), but all my clusters are secured with Multi-Admin verification for volume and snapshot deletion. Is there a way to configure Trident so it won't try to delete volumes?
#Use Trident while Multi-Admin Verification is active
queen oxide
fringe drift
if you're using the nas-economy driver it is very unlikely that Trident will delete the volume at all, since you will almost certainly still have some pods running on the qtrees
I don't think you can disable deletion completely in Trident though, but what you can do is add a query to MAV to exclude it from the SVM or volumes in question
karmic pine
You can't stop the deletion in Trident, but you can stop Kubernetes from asking Trident to delete the qtrees (and thus the volumes). This is done at the storage class level, with the setting of:
reclaimPolicy: Retain
You will still see PVCs get created and deleted, but the underlying PV will still continue to exist, though it will show as "released" instead of "bound" when you look at them.
queen oxide
I am fine with deletion of qtrees. Just deleting volumes will fail, because of MAV. I see there is an example for negative queries in the MAV documentation. https://docs.netapp.com/us-en/ontap/multi-admin-verify/manage-rules-task.html#rule-constraints
I guess that's the way to go.
karmic pine
Just tested.... Trident doesn't remove the empty volumes when qtrees are removed from the volumes, but it does re-use the existing volumes if more qtrees are created.