Skip to main content

Enable Astra Control Provisioner

Contributors netapp-dbagwell
PDFs

Astra Trident versions 23.10 and later include the option to use Astra Control Provisioner, which enables licensed Astra Control users to access advanced storage provisioning functionality. Astra Control Provisioner provides this extended functionality in addition to standard Astra Trident CSI-based functionality.

In coming Astra Control updates, Astra Control Provisioner will replace Astra Trident as storage provisioner and orchestrator and be mandatory for Astra Control use. Because of this, it's strongly recommended that Astra Control users enable Astra Control Provisioner. Astra Trident will continue to remain open source and be released, maintained, supported, and updated with new CSI and other features from NetApp.

About this task

You should follow this procedure if you are a licensed Astra Control Center user and you are looking to use Astra Control Provisioner functionality. You should also follow this procedure if you are an Astra Trident user and want to use the additional functionality that Astra Control Provisioner provides without also using Astra Control.

For each case, the provisioner functionality is not enabled by default in Astra Trident 24.02 and must be enabled.

Before you begin

If you are enabling Astra Control Provisioner, do the following first:

Astra Control Provisioners users with Astra Control Center

  • Obtain an Astra Control Center license: You'll need an Astra Control Center license to enable Astra Control Provisioner and access the functionality it provides.

  • Install or upgrade to Astra Control Center 23.10 or later: You'll need the latest Astra Control Center version (24.02) if you are planning to use the latest Astra Control Provisioner functionality (24.02) with Astra Control.

  • Confirm that your cluster has an AMD64 system architecture: The Astra Control Provisioner image is provided in both AMD64 and ARM64 CPU architectures, but only AMD64 is supported by Astra Control Center.

  • Get an Astra Control Service account for registry access: If you intend to use the Astra Control registry rather than the NetApp Support Site to download the Astra Control Provisioner image, complete the registration for an Astra Control Service account. After you complete and submit the form and create a BlueXP account, you'll receive an Astra Control Service welcome email.

  • If you have Astra Trident installed, confirm that its version is within a four-release window: You can perform a direct upgrade to Astra Trident 24.02 with Astra Control Provisioner if your Astra Trident is within a four-release window of version 24.02. For example, you can directly upgrade from Astra Trident 23.04 to 24.02.

Astra Control Provisioner only users

  • Obtain an Astra Control Center license: You'll need an Astra Control Center license to enable Astra Control Provisioner and access the functionality it provides.

  • If you have Astra Trident installed, confirm that its version is within a four-release window: You can perform a direct upgrade to Astra Trident 24.02 with Astra Control Provisioner if your Astra Trident is within a four-release window of version 24.02. For example, you can directly upgrade from Astra Trident 23.04 to 24.02.

  • Get an Astra Control Service account for registry access: You'll need access to the registry to download Astra Control Provisioner images. To get started, complete the registration for an Astra Control Service account. After you complete and submit the form and create a BlueXP account, you'll receive an Astra Control Service welcome email.

(Step 1) Get the Astra Control Provisioner image

Astra Control Center users can get the Astra Control Provisioner image using either the Astra Control registry or NetApp Support Site method. Astra Trident users wanting to use Astra Control Provisioner without Astra Control should use the registry method.

Astra Control image registry
Note You can use Podman instead of Docker for the commands in this procedure. If you are using a Windows environment, PowerShell is recommended.

  1. Access the NetApp Astra Control image registry:

    1. Log on to the Astra Control Service web UI and select the figure icon at the top right of the page.

    2. Select API access.

    3. Write down your account ID.

    4. From the same page, select Generate API token and copy the API token string to the clipboard and save it in your editor.

    5. Log into the Astra Control registry using your preferred method:

      docker login cr.astra.netapp.io -u <account-id> -p <api-token>
      crane auth login cr.astra.netapp.io -u <account-id> -p <api-token>

  2. (Custom registries only) Follow these steps to move the image to your custom registry. If you aren't using a registry, follow the Trident operator steps in the next section.

    1. Pull the Astra Control Provisioner image from the registry:

      Note The image pulled will not support multiple platforms and will only support the same platform as the host that pulled the image, such as Linux AMD64. 
      docker pull cr.astra.netapp.io/astra/trident-acp:24.02.0 --platform <cluster platform>

      Example:

      docker pull cr.astra.netapp.io/astra/trident-acp:24.02.0 --platform linux/amd64

    2. Tag the image:

      docker tag cr.astra.netapp.io/astra/trident-acp:24.02.0 <my_custom_registry>/trident-acp:24.02.0

    3. Push the image to your custom registry:

      docker push <my_custom_registry>/trident-acp:24.02.0
Note You can use Crane copy as an alternative to running these Docker commands:
crane copy cr.astra.netapp.io/astra/trident-acp:24.02.0 <my_custom_registry>/trident-acp:24.02.0
NetApp Support Site

  1. Download the Astra Control Provisioner bundle (trident-acp-[version].tar) from the Astra Control Center downloads page.

  2. (Recommended but optional) Download the certificates and signatures bundle for Astra Control Center (astra-control-center-certs-[version].tar.gz) to verify the signature of the trident-acp-[version] tar bundle.

    tar -vxzf astra-control-center-certs-[version].tar.gz
    openssl dgst -sha256 -verify certs/AstraControlCenterDockerImages-public.pub -signature certs/trident-acp-[version].tar.sig trident-acp-[version].tar

  3. Load the Astra Control Provisioner image:

    docker load < trident-acp-24.02.0.tar

    Response:

    Loaded image: trident-acp:24.02.0-linux-amd64

  4. Tag the image:

    docker tag trident-acp:24.02.0-linux-amd64 <my_custom_registry>/trident-acp:24.02.0

  5. Push the image to your custom registry:

    docker push <my_custom_registry>/trident-acp:24.02.0

(Step 2) Enable Astra Control Provisioner in Astra Trident

Determine if the original installation method used an operator (either manually or with Helm) or tridentctl and complete the appropriate steps according to your original method.

Astra Trident operator

  1. Download the Astra Trident installer and extract it.

  2. Complete these steps if you have not yet installed Astra Trident or if you removed the operator from your original Astra Trident deployment:

    1. Create the CRD:

      kubectl create -f deploy/crds/trident.netapp.io_tridentorchestrators_crd_post1.16.yaml

    2. Create the trident namespace (kubectl create namespace trident) or confirm that the trident namespace still exists (kubectl get all -n trident). If the namespace has been removed, create it again.

  3. Update Astra Trident to 24.02.0:

    Note For clusters running Kubernetes 1.24 or earlier, use bundle_pre_1_25.yaml. For clusters running Kubernetes 1.25 or later, use bundle_post_1_25.yaml. 
    kubectl -n trident apply -f trident-installer/deploy/<bundle-name.yaml>

  4. Verify Astra Trident is running:

    kubectl get torc -n trident

    Response:

    NAME      AGE
trident   21m

  5. If you have a registry that uses secrets, create a secret to use to pull the Astra Control Provisioner image:

    kubectl create secret docker-registry <secret_name> -n trident --docker-server=<my_custom_registry> --docker-username=<username> --docker-password=<token>

  6. Edit the TridentOrchestrator CR and make the following edits:

    kubectl edit torc trident -n trident

    1. Set a custom registry location for the Astra Trident image or pull it from the Astra Control registry (tridentImage: <my_custom_registry>/trident:24.02.0 or tridentImage: netapp/trident:24.02.0).

    2. Enable Astra Control Provisioner (enableACP: true).

    3. Set the custom registry location for the Astra Control Provisioner image or pull it from the Astra Control registry (acpImage: <my_custom_registry>/trident-acp:24.02.0 or acpImage: cr.astra.netapp.io/astra/trident-acp:24.02.0).

    4. If you established image pull secrets earlier in this procedure, you can set them here (imagePullSecrets: - <secret_name>). Use the same name secret name you established in the previous steps.

    apiVersion: trident.netapp.io/v1
kind: TridentOrchestrator
metadata:
  name: trident
spec:
  debug: true
  namespace: trident
  tridentImage: <registry>/trident:24.02.0
  enableACP: true
  acpImage: <registry>/trident-acp:24.02.0
  imagePullSecrets:
  - <secret_name>

  7. Save and exit the file. The deployment process will begin automatically.

  8. Verify the operator, deployment, and replicasets are created.

    kubectl get all -n trident
    Important There should only be one instance of the operator in a Kubernetes cluster. Do not create multiple deployments of the Astra Trident operator.

  9. Verify the trident-acp container is running and that acpVersion is 24.02.0 with a status of Installed:

    kubectl get torc -o yaml

    Response:

    status:
  acpVersion: 24.02.0
  currentInstallationParams:
    ...
    acpImage: <registry>/trident-acp:24.02.0
    enableACP: "true"
    ...
  ...
  status: Installed
tridentctl

  1. Download the Astra Trident installer and extract it.

  2. If you have an existing Astra Trident, uninstall it from the cluster that hosts it.

  3. Install Astra Trident with Astra Control Provisioner enabled (--enable-acp=true):

    ./tridentctl -n trident install --enable-acp=true --acp-image=mycustomregistry/trident-acp:24.02

  4. Confirm that Astra Control Provisioner has been enabled:

    ./tridentctl -n trident version

    Response:

    +----------------+----------------+-------------+ | SERVER VERSION | CLIENT VERSION | ACP VERSION | +----------------+----------------+-------------+ | 24.02.0 | 24.02.0 | 24.02.0. | +----------------+----------------+-------------+
Helm

  1. If you have Astra Trident 23.07.1 or earlier installed, uninstall the operator and other components.

  2. If your Kubernetes cluster is running 1.24 or earlier, delete psp:

    kubectl delete psp tridentoperatorpod

  3. Add the Astra Trident Helm repository:

    helm repo add netapp-trident https://netapp.github.io/trident-helm-chart

  4. Update the Helm chart:

    helm repo update netapp-trident

    Response:

    Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "netapp-trident" chart repository
Update Complete. ⎈Happy Helming!⎈

  5. List the images:

    ./tridentctl images -n trident

    Response:

    | v1.28.0            | netapp/trident:24.02.0|
|                    | docker.io/netapp/trident-autosupport:24.02|
|                    | registry.k8s.io/sig-storage/csi-provisioner:v4.0.0|
|                    | registry.k8s.io/sig-storage/csi-attacher:v4.5.0|
|                    | registry.k8s.io/sig-storage/csi-resizer:v1.9.3|
|                    | registry.k8s.io/sig-storage/csi-snapshotter:v6.3.3|
|                    | registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.0 |
|                    | netapp/trident-operator:24.02.0 (optional)

  6. Ensure that trident-operator 24.02.0 is available:

    helm search repo netapp-trident/trident-operator --versions

    Response:

    NAME                            CHART VERSION   APP VERSION     DESCRIPTION
netapp-trident/trident-operator 100.2402.0      24.02.0         A

  7. Use helm install and run one of the following options that include these settings:

    • A name for your deployment location

    • The Astra Trident version

    • The name of the Astra Control Provisioner image

    • The flag to enable the provisioner

    • (Optional) A local registry path. If you are using a local registry, your Trident images can be located in one registry or different registries, but all CSI images must be located in the same registry.

    • The Trident namespace

Options

  • Images without a registry

helm install trident netapp-trident/trident-operator --version 100.2402.0 --set acpImage=cr.astra.netapp.io/astra/trident-acp:24.02.0 --set enableACP=true --set operatorImage=netapp/trident-operator:24.02.0 --set tridentAutosupportImage=docker.io/netapp/trident-autosupport:24.02 --set tridentImage=netapp/trident:24.02.0 --namespace trident

  • Images in one or more registries

helm install trident netapp-trident/trident-operator --version 100.2402.0 --set acpImage=<your-registry>:<acp image> --set enableACP=true --set imageRegistry=<your-registry>/sig-storage --set operatorImage=netapp/trident-operator:24.02.0 --set tridentAutosupportImage=docker.io/netapp/trident-autosupport:24.02 --set tridentImage=netapp/trident:24.02.0 --namespace trident

You can use helm list to review installation details such as name, namespace, chart, status, app version, and revision number.

Note

If you have any issues deploying Trident using Helm, run this command to fully uninstall Astra Trident:

./tridentctl uninstall -n trident

Do not completely remove Astra Trident CRDs as part of your uninstall before attempting to enable Astra Control Provisioner again.

Result

Astra Control Provisioner functionality is enabled and you can use any features available for the version you are running.

(For Astra Control Center users only) After Astra Control Provisioner is installed, the cluster hosting the provisioner in the Astra Control Center UI will show an ACP version rather than Trident version field and current installed version number.

A screenshot depicting the Astra Control Provisioner version location in UI

For more information