Skip to main content
Astra Control Service
All cloud providers
  • Amazon Web Services
  • Google Cloud
  • Microsoft Azure
  • All cloud providers

Enable Astra Control Provisioner

Contributors netapp-dbagwell

Astra Trident versions 23.10 and later include the option to use Astra Control Provisioner, which enables licensed Astra Control users to access advanced storage provisioning functionality. Astra Control Provisioner provides this extended functionality in addition to standard Astra Trident CSI-based functionality. You can use this procedure to enable and install Astra Control Provisioner.

Your Astra Control Service subscription automatically includes the license for Astra Control Provisioner use.

In coming Astra Control updates, Astra Control Provisioner will replace Astra Trident as storage provisioner and orchestrator and be mandatory for Astra Control use. Because of this, it's strongly recommended that Astra Control users enable Astra Control Provisioner. Astra Trident will continue to remain open source and be released, maintained, supported, and updated with new CSI and other features from NetApp.

How do I know if I need to enable Astra Control Provisioner?

If you add a cluster to Astra Control Service that does not have Astra Trident previously installed, the cluster will be marked as Eligible. After you add the cluster to Astra Control, Astra Control Provisioner will be automatically enabled.

If your cluster is not marked Eligible, it will be marked Partially eligible because of one of the following:

  • It's using an older version of Astra Trident

  • It's using an Astra Trident 23.10 that does not yet have the provisioner option enabled

  • It's a cluster type that does not allow automatic enablement

For Partially eligible cases, use these instructions to manually enable Astra Control Provisioner for your cluster.

A screenshot depicting cluster eligibility in the Add cluster workflow

Before you enable Astra Control Provisioner

If you have an existing Astra Trident without Astra Control Provisioner and want to enable Astra Control Provisioner, do the following first:

  • If you have Astra Trident installed, confirm that its version is within a four-release window: You can perform a direct upgrade to Astra Trident 24.02 with Astra Control Provisioner if your Astra Trident is within a four-release window of version 24.02. For example, you can directly upgrade from Astra Trident 23.04 to 24.02.

  • Confirm that your cluster has an AMD64 system architecture: The Astra Control Provisioner image is provided in both AMD64 and ARM64 CPU architectures, but only AMD64 is supported by Astra Control.

Steps
  1. Access the NetApp Astra Control image registry:

    1. Log on to the Astra Control Service UI and record your Astra Control account ID.

      1. Select the figure icon at the top right of the page.

      2. Select API access.

      3. Write down your account ID.

    2. From the same page, select Generate API token and copy the API token string to the clipboard and save it in your editor.

    3. Log into the Astra Control registry using your preferred method:

      docker login cr.astra.netapp.io -u <account-id> -p <api-token>
      Docker
      crane auth login cr.astra.netapp.io -u <account-id> -p <api-token>
      Crane
  2. (Custom registries only) Follow these steps to move the image to your custom registry. If you aren't using a registry, follow the Trident operator steps in the next section.

    Note You can use Podman instead of Docker for the following commands. If you are using a Windows environment, PowerShell is recommended.
    1. Pull the Astra Control Provisioner image from the registry:

      Note The image pulled will not support multiple platforms and will only support the same platform as the host that pulled the image, such as Linux AMD64.
      docker pull cr.astra.netapp.io/astra/trident-acp:24.02.0 --platform <cluster platform>
      Console

      Example:

      docker pull cr.astra.netapp.io/astra/trident-acp:24.02.0 --platform linux/amd64
    2. Tag the image:

      docker tag cr.astra.netapp.io/astra/trident-acp:24.02.0 <my_custom_registry>/trident-acp:24.02.0
      Console
    3. Push the image to your custom registry:

      docker push <my_custom_registry>/trident-acp:24.02.0
      Console
  3. Determine if the original Astra Trident installation method used an operator (either manually or with Helm) or tridentctl.

  4. Enable Astra Control Provisioner in Astra Trident using the installation method you used originally:

    1. Download the Astra Trident installer and extract it.

    2. Complete these steps if you have not yet installed Astra Trident or if you removed the operator from your original Astra Trident deployment:

      1. Create the CRD:

        kubectl create -f deploy/crds/trident.netapp.io_tridentorchestrators_crd_post1.16.yaml
        Console
      2. Create the trident namespace (kubectl create namespace trident) or confirm that the trident namespace still exists (kubectl get all -n trident). If the namespace has been removed, create it again.

    3. Update Astra Trident to 24.02.0:

      Note For clusters running Kubernetes 1.24 or earlier, use bundle_pre_1_25.yaml. For clusters running Kubernetes 1.25 or later, use bundle_post_1_25.yaml.
      kubectl -n trident apply -f trident-installer/deploy/<bundle-name.yaml>
      Console
    4. Verify Astra Trident is running:

      kubectl get torc -n trident
      Console

      Response:

      NAME      AGE
      trident   21m
    5. If you have a registry that uses secrets, create a secret to use to pull the Astra Control Provisioner image:

      kubectl create secret docker-registry <secret_name> -n trident --docker-server=<my_custom_registry> --docker-username=<username> --docker-password=<token>
      Console
    6. Edit the TridentOrchestrator CR and make the following edits:

      kubectl edit torc trident -n trident
      Console
      1. Set a custom registry location for the Astra Trident image or pull it from the Astra Control registry (tridentImage: <my_custom_registry>/trident:24.02.0 or tridentImage: netapp/trident:24.02.0).

      2. Enable Astra Control Provisioner (enableACP: true).

      3. Set the custom registry location for the Astra Control Provisioner image or pull it from the Astra Control registry (acpImage: <my_custom_registry>/trident-acp:24.02.0 or acpImage: cr.astra.netapp.io/astra/trident-acp:24.02.0).

      4. If you established image pull secrets earlier in this procedure, you can set them here (imagePullSecrets: - <secret_name>). Use the same name secret name you established in the previous steps.

      apiVersion: trident.netapp.io/v1
      kind: TridentOrchestrator
      metadata:
        name: trident
      spec:
        debug: true
        namespace: trident
        tridentImage: <registry>/trident:24.02.0
        enableACP: true
        acpImage: <registry>/trident-acp:24.02.0
        imagePullSecrets:
        - <secret_name>
    7. Save and exit the file. The deployment process will begin automatically.

    8. Verify the operator, deployment, and replicasets are created.

      kubectl get all -n trident
      Console
      Important There should only be one instance of the operator in a Kubernetes cluster. Do not create multiple deployments of the Astra Trident operator.
    9. Verify the trident-acp container is running and that acpVersion is 24.02.0 with a status of Installed:

      kubectl get torc -o yaml
      Console

      Response:

      status:
        acpVersion: 24.02.0
        currentInstallationParams:
          ...
          acpImage: <registry>/trident-acp:24.02.0
          enableACP: "true"
          ...
        ...
        status: Installed
Result

Astra Control Provisioner functionality is enabled and you can use any features available for the version you are running.

After Astra Control Provisioner is installed, the cluster hosting the provisioner in the Astra Control UI will show an ACP version rather than Trident version field and current installed version number.

A screenshot depicting the ACP version location in UI