cluster admin use case

[hmarko]

Hi.

from my reading, it seem that trident_mcc doesn't address cluster admin usecase (https://netapp-trident.readthedocs.io/en/stable-v21.07/kubernetes/operations/tasks/backends/ontap/ontap-san/user-permissions.html)
are there any plans to include it ?

thanks !

[obassett]

Hi hmarko,

It does handle using cluster logins and detecting, but the challenge is that the cluster management Lif doesn't typically failover with a metro-cluster - so you would be connecting to the wrong place to try and manage it. I could potentially approach it by allowing annotations or something that would let you supply the alternate managementLif and then go looking for the SVM, but I think typically using SVM scoped credentials is easier and would suit most use-cases.

Do you only use cluster scoped management in your environment? I am interested to understand how it works in your environment and what you would like to see?

Thanks.

[hmarko]

Hi.

My customer uses Trident with multiple backend configurations, some of them use cluster-scoped login.

[hmarko]

Regarding a solution, You can use the following:

1. static annotations to keep remote cluster details for each cluster you monitor
2. dynamically cache the remote cluster name using rest call get cluster/metrocluster (9.8+) or private cli for lower ontap.