ONTAP SAN driver overview
Learn about configuring an ONTAP backend with ONTAP and Cloud Volumes ONTAP SAN drivers.
ONTAP SAN driver details
Astra Trident provides the following SAN storage drivers to communicate with the ONTAP cluster. Supported access modes are: ReadWriteOnce (RWO), ReadOnlyMany (ROX), ReadWriteMany (RWX), ReadWriteOncePod (RWOP).
If you are using Astra Control for protection, recovery, and mobility, read Astra Control driver compatibility. |
Driver | Protocol | volumeMode | Access modes supported | File systems supported |
---|---|---|---|---|
|
iSCSI |
Block |
RWO, ROX, RWX, RWOP |
No filesystem; raw block device |
|
iSCSI |
Filesystem |
RWO, RWOP ROX and RWX are not available in Filesystem volume mode. |
|
|
iSCSI |
Block |
RWO, ROX, RWX, RWOP |
No filesystem; raw block device |
|
iSCSI |
Filesystem |
RWO, RWOP ROX and RWX are not available in Filesystem volume mode. |
|
Astra Control driver compatibility
Astra Control provides seamless protection, disaster recovery, and mobility (moving volumes between Kubernetes clusters) for volumes created with the ontap-nas
, ontap-nas-flexgroup
, and ontap-san
drivers. See Astra Control replication prerequisites for details.
|
User permissions
Astra Trident expects to be run as either an ONTAP or SVM administrator, typically using the admin
cluster user or a vsadmin
SVM user, or a user with a different name that has the same role. For Amazon FSx for NetApp ONTAP deployments, Astra Trident expects to be run as either an ONTAP or SVM administrator, using the cluster fsxadmin
user or a vsadmin
SVM user, or a user with a different name that has the same role. The fsxadmin
user is a limited replacement for the cluster admin user.
If you use the limitAggregateUsage parameter, cluster admin permissions are required. When using Amazon FSx for NetApp ONTAP with Astra Trident, the limitAggregateUsage parameter will not work with the vsadmin and fsxadmin user accounts. The configuration operation will fail if you specify this parameter.
|
While it is possible to create a more restrictive role within ONTAP that a Trident driver can use, we don't recommend it. Most new releases of Trident will call additional APIs that would have to be accounted for, making upgrades difficult and error-prone.