Support of VAST Cluster Multi-Tenancy

Prev Next

VAST CSI Driver can operate on multiple VAST Cluster tenants.

When using VAST CSI Driver with VAST Cluster 5.3.3 or later, you can specify the VAST cluster tenant from which to provision storage for a claim. To do so:

  • Supply the tenant parameter in the Kubernetes secret (that provides credentials used to connect to the VAST cluster).

  • Use a VMS user that is a Tenant Admin for the desired tenant when connecting to the VAST cluster.

    To check VMS user type in VAST Web UI, go to Administrators -> Managers ,  click a user and look at the User type field, which should be set to  Tenant Admin.

When no tenant parameter is supplied or supported (which is the case when VAST Cluster 5.3.2 or earlier is used), the tenant is determined based on the view policy that is attached to the view that exposes the volume.

To be able to operate in a multi-tenant environment, VAST CSI Driver requires VAST Cluster 4.7.0-SP6 or later with the Trash Folder Access feature enabled.

Note

If a deletion view policy (deletionViewPolicy) is specified in the VAST CSI Driver's Helm chart configuration file, the tenant in the deletion view policy must match the tenant of the view policy (viewPolicy) specified in the storage class. Otherwise, deletions would fail.