Can you not use the Kubernetes Resource Quoting objects to control the same ( Limits applied at the openshift/k8 cluster side ) ?
https://kubernetes.io/docs/concepts/policy/resource-quotas/
You would need to have a mechanism to control these resource quota numbers across multiple namespaces/ in a given cluster to make sure you did not exceed what was available to provision in the associated trident backend aggregate for the SVM you were pointing at .
This seemed like an approach to me anyway . Is the above not feasible ?
On Fri, Nov 6, 2020 at 9:42 AM Parisi, Justin Justin.Parisi@netapp.com wrote:
Nice workaround!
We do know of this limitation and are looking to try to address in future releases, btw.
*From:* Alexander Griesser AGriesser@anexia-it.com *Sent:* Friday, November 6, 2020 9:37 AM *To:* Parisi, Justin Justin.Parisi@netapp.com; Toasters < toasters@teaparty.net> *Subject:* AW: SVM Trident limits/config
*NetApp Security WARNING*: This is an external email. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Hah, I think I just found a way to do that.
I’ts not perfect, but I can at least set a maximum to get some control on that.
I can limit the maximum number of volumes an SVM can create with:
vserver modify -vserver vs1 -max-volumes 10
And with the following rule, I can disallow the creation of a volume > 10G:
security login role create -vserver vNFS_440019_onepanel01 -role restricted -cmddirname "volume" -access all -query "-size <=10G"
Creation of a volume with size 10G:
vNFS_440019_onepanel01::> vol create -aggregate superion_data -size 10g -volume test1
vNFS_440019_onepanel01::> vol show
Vserver Volume Aggregate State Type Size Available Used%
vNFS_440019_onepanel01
test1 superion_data online RW 10GB9.50GB 0%
11G:
vNFS_440019_onepanel01::> vol create -aggregate superion_data -size 11g -volume test2
Error: command failed: not authorized for that command
Trying to resize the previously created 10G volume to 11G:
vNFS_440019_onepanel01::> vol size -volume test2 -new-size +1g
Error: command failed: not authorized for that command
Not perfect, but better than nothing.
*Alexander Griesser*
Head of Systems Operations
ANEXIA Internetdienstleistungs GmbH
E-Mail: AGriesser@anexia-it.com
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
*Von:* Parisi, Justin Justin.Parisi@netapp.com *Gesendet:* Freitag, 6. November 2020 15:19 *An:* Alexander Griesser AGriesser@anexia-it.com; Toasters < toasters@teaparty.net> *Betreff:* RE: SVM Trident limits/config
No, there is not a way to do that.
*From:* Toasters toasters-bounces@teaparty.net *On Behalf Of *Alexander Griesser *Sent:* Friday, November 6, 2020 9:07 AM *To:* Toasters toasters@teaparty.net *Subject:* SVM Trident limits/config
*NetApp Security WARNING*: This is an external email. Do not click links or open attachments unless you recognize the sender and know the content is safe.
Hey there,
due to popular demand, I’m currently playing around with the trident integration and am following the docs here:
https://netapp-trident.readthedocs.io/en/stable-v18.07/docker/install/ndvp_o...
From what I can see, there’s no easy way to limit the total amount of volume space created from within the SVM.
I can limit the amount of volumes that can be created, but I cannot limit the maximum total size of those – or is there any option to do that?
I just want to make sure that none of these clients are using more resources than assigned (without having to assign dedicated aggregates).
Is that possible?
Thanks,
*Alexander Griesser*
Head of Systems Operations
ANEXIA Internetdienstleistungs GmbH
E-Mail: AGriesser@anexia-it.com
Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601
Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters